Commit Graph

268 Commits

Author SHA1 Message Date
moltenbit 7f575e6284 Revise Lynis installation commands for Debian
Updated installation instructions for Lynis on Debian systems to use GPG keyrings.
2026-03-05 13:18:51 +01:00
moltenbit 57f7c8c437 Remove Protocol 2 line in ssh config
Fixes #118 
Protocol option does not exist anymore, throws errors and suggests that a Protocol 1 still exists, which it doesn't.
2026-03-05 12:41:43 +01:00
moltenbit 75e4db1d00 Remove tls_force_sslv3 and tls_min_dh_prime_bits
#85 
Removed deprecated TLS configuration options.
2026-03-05 12:25:33 +01:00
moltenbit 1bab4999bd Merge pull request #132 from imthenachoman/fix/ntp-debian13
Fix/ntp debian13
2026-03-05 11:05:20 +01:00
moltenbit 522b606c4e Add note about ntp in Debian 13+
Update instructions for NTP client configuration on Debian 13+.
2026-03-05 11:02:09 +01:00
moltenbit bfa59bdb01 Add systemd-timesyncd setup instructions for Debian 13
Added instructions for using systemd-timesyncd on Debian 13 and later, including enabling NTP synchronization, configuring trusted NTP servers, and checking synchronization status.
2026-03-05 10:56:55 +01:00
moltenbit d22bb50c64 Fix typo in README regarding iptables logs 2026-03-05 08:40:35 +01:00
moltenbit ff39dc4edc Merge pull request #126 from Triveri/fix/broken-link-psad-iptables-logs
Fix broken link in PSAD section
2026-03-05 08:39:15 +01:00
moltenbit 3ddb700f90 Make RSA key size requirement optional
Make RSA key size requirement optional and added explanation.
2026-03-05 08:28:05 +01:00
DennisNikolay 20393606b6 Added RequiredRSASize to sshd_config (#123)
Enforces a minimum RSA key size of 3072, as recommended by various standards bodies, as detailed here:

https://www.keylength.com/en/compare/
2026-03-05 08:18:55 +01:00
moltenbit 0c67bbb078 Merge pull request #131 from Miquel-TA/patch-1
Added a brief explanation about ufw limit
2026-03-05 08:08:05 +01:00
Miquel TA a01b455d04 Added a brief explanation about ufw limit 2026-03-04 18:28:30 +01:00
Miquel TA e0f0e874f9 Update SSH connections explanation in README
Clarify the explanation for allowing SSH connections.
2026-03-04 18:25:09 +01:00
Triveri Samuele 1bf40ead23 fix: fixed broken link in PSAD section 2025-02-23 01:24:24 +01:00
IMTheNachoMan 2f856eba85 Merge pull request #122 from LaurenceJJones/add-crowdsec
Add crowdsec section
2024-10-19 16:10:33 -04:00
Laurence 356a69ae58 enhance: Spell check 2024-10-16 13:32:23 +01:00
Laurence bf8691c29c enhance: Try to fix tip 2024-10-16 13:28:02 +01:00
Laurence 8f8d99ee6f enhance: Try to fix tip 2024-10-16 13:27:10 +01:00
Laurence 59d947c4f2 enhance: Try to fix tip 2024-10-16 13:25:29 +01:00
Laurence b6be7dcbc8 enhance: Try to fix tip 2024-10-16 13:24:19 +01:00
Laurence b962cdd0f0 enhance: Try to fix tip 2024-10-16 13:23:05 +01:00
Laurence 7f26deb683 enhance: Try to fix tip 2024-10-16 13:21:53 +01:00
Laurence b834836045 enhance: fix tips 2024-10-15 22:11:29 +01:00
Laurence 928eb2de88 enhance: fix tips 2024-10-15 22:09:41 +01:00
Laurence 0b1f1cbf6b enhance: Add crowdsec section 2024-10-15 22:08:06 +01:00
IMTheNachoMan 0d29a5cc8c Merge pull request #120 from wevinkang/patch-1
Update README.md
2024-06-30 22:30:32 -04:00
Kevin Wang c836cbce79 Update README.md
Updated the full path for ntp.conf file.
2024-06-28 12:04:05 -04:00
IMTheNachoMan 81ae738ffd Merge pull request #114 from jxdv/readme-fix
README improvements
2024-04-11 21:57:35 -04:00
IMTheNachoMan f34170e867 Update README.md
https://github.com/imthenachoman/How-To-Secure-A-Linux-Server/issues/115
2024-02-24 09:03:02 -05:00
jxdv c2f8f2e42d README improvements 2024-01-08 17:43:44 +01:00
IMTheNachoMan a72f5f2123 Merge pull request #111 from t-h2o/secure-nginx
add misc recommendations about nginx
2024-01-06 13:30:20 -05:00
Your Name 6ec31b6344 add misc recommendations about nginx
There is not any section about web servers.
So you should probably create a section
about web servers.
2023-12-21 12:32:57 +01:00
IMTheNachoMan 437b59c515 Merge pull request #102 from hellresistor/AddDoublePasswordSec
Add panic/secondary password security
2023-12-04 17:39:07 -05:00
IMTheNachoMan 944d0e66b5 Merge pull request #101 from moltenbit/master
Added references to Ansible playbooks
2023-12-04 17:38:54 -05:00
mbit 74f1c2db8a updated references to my changed username 2023-12-04 20:31:19 +01:00
sysadt 3f20de98ba Merge branch 'imthenachoman:master' into master 2023-11-08 22:09:16 +01:00
IMTheNachoMan fe62dc3a11 Update README.md
https://github.com/imthenachoman/How-To-Secure-A-Linux-Server/issues/106
2023-10-01 22:06:26 -04:00
hellresistor 2a30412a28 Update README.md 2023-06-27 21:01:18 +01:00
sysadt 6832a167ec correction of link in TOC 2023-06-27 21:57:58 +02:00
sysadt d440add836 added section for Ansible playbooks 2023-06-27 21:56:59 +02:00
hellresistor c80f0c664f Update README.md
Add PAnic/Secondary password
2023-06-27 20:55:25 +01:00
sysadt cb61987ffb Added references to Ansible playbooks 2023-06-27 21:39:17 +02:00
IMTheNachoMan 04538ec63b Merge pull request #99 from nhedger/patch-1
Fix typo
2023-05-28 19:38:48 -04:00
Nicolas Hedger dc647d7ee1 Fix typo 2023-05-21 09:10:04 +02:00
IMTheNachoMan cc74e3e5a6 Update README.md 2023-04-29 13:30:04 -04:00
IMTheNachoMan 957ac09544 Merge pull request #94 from sysadt/master
Changes to ufw
2023-03-23 22:28:11 -04:00
IMTheNachoMan cf7b5681ed Merge pull request #96 from Bojan023/patch-1
Add cli command to check current sudoers on debian
2023-03-23 22:27:07 -04:00
IMTheNachoMan 87391f5eab clarified CIS recommendation
https://github.com/imthenachoman/How-To-Secure-A-Linux-Server/issues/97
2023-03-23 22:25:58 -04:00
Bojan Bogojevic 17bc162d48 Add cli command to check current sudoers 2023-03-22 12:12:49 +01:00
sysadt 6ec89c07c8 wording to "deleting ufw rule"
title
2023-02-22 22:20:07 +01:00