Изменения документа Proxy

Сводка

• Свойства страницы (1 изменено, 0 добавлено, 0 удалено)

Подробности

Свойства страницы

Содержимое

...	...	@@ -1,5 +1,9 @@
	1	+# Отключение ICMP
	2	+
1	1	nano disable_ping.sh
2	2
	5	+-- НЕ ввезде прокатывает )) Зависит от Хостера
	6	+
3	3	#!/usr/bin/env bash
4	4	set -e
5	5
...	...	@@ -20,7 +20,7 @@
20	20
21	21	chmod +x disable_ping.sh && ./disable_ping.sh
22	22
23		-Утилиты
	27	+# Утилиты
24	24
25	25	sudo apt update && sudo apt upgrade -y && \
26	26	sudo apt install -y \
...	...	@@ -50,7 +50,7 @@
50	50
51	51	--
52	52
53		- базовая настройка:
	57	+базовая настройка:
54	54
55	55	# UFW
56	56	sudo ufw default deny incoming
...	...	@@ -57,11 +57,60 @@
57	57	sudo ufw default allow outgoing
58	58	sudo ufw allow OpenSSH
59	59	sudo ufw enable
	64	+
	65	+### fail2ban
	66	+
	67	+ sudo apt install fail2ban -y
	68	+ sudo bash -c 'cat > /etc/fail2ban/jail.local << "JAIL"
	69	+ [DEFAULT]
	70	+ bantime = 24h
	71	+ findtime = 10m
	72	+ maxretry = 3
60	60
61		- # fail2ban (ssh-джейл по умолчанию)
62		- sudo systemctl enable --now fail2ban
	74	+ bantime.increment = true
	75	+ bantime.factor = 2
	76	+ bantime.maxtime = 4w
	77	+
	78	+ banaction = iptables-multiport
	79	+ banaction_allports = iptables-allports
	80	+
	81	+ ignoreip = 127.0.0.1/8 ::1
	82	+
	83	+ [sshd]
	84	+ enabled = true
	85	+ logpath = %(sshd_log)s
	86	+ backend = %(sshd_backend)s
	87	+ maxretry = 3
	88	+ bantime = 48h
	89	+ findtime = 15m
	90	+ mode = aggressive
	91	+
	92	+ [sshd-ddos]
	93	+ enabled = true
	94	+ logpath = %(sshd_log)s
	95	+ backend = %(sshd_backend)s
	96	+ maxretry = 5
	97	+ bantime = 24h
	98	+ findtime = 30s
	99	+
	100	+ [recidive]
	101	+ enabled = true
	102	+ logpath = /var/log/fail2ban.log
	103	+ maxretry = 3
	104	+ bantime = 4w
	105	+ findtime = 7d
	106	+ banaction = iptables-allports
	107	+ JAIL
	108	+ apt-get update
	109	+ apt-get install -y fail2ban
	110	+ systemctl enable --now fail2ban
	111	+ systemctl restart fail2ban
	112	+ echo "fail2ban настроен и запущен"
	113	+ '
	114	+ systemctl enable fail2ban
	115	+ systemctl restart fail2ban
63	63
64		-ZSH
	117	+# ZSH
65	65
66	66	sudo apt update && sudo apt install -y zsh git fonts-powerline curl && \
67	67	sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)" "" --unattended && \
...	...	@@ -88,7 +88,7 @@
88	88
89	89	--
90	90
91		-Докер
	144	+# Докер
92	92
93	93	sudo curl -fsSL https://get.docker.com | sh &&
94	94	LATEST=$(curl -sL https://api.github.com/repos/docker/compose/releases/latest | grep '"tag_name":' | cut -d'"' -f4)
...	...	@@ -98,16 +98,14 @@
98	98	chmod +x $DOCKER_CONFIG/cli-plugins/docker-compose
99	99	docker compose version
100	100
101		-Управление докером
	154	+## Управление докером
102	102
103		-ctop
	156	+### ctop
104	104
105	105	sudo wget https://github.com/bcicen/ctop/releases/download/v0.7.7/ctop-0.7.7-linux-amd64 -O /usr/local/bin/ctop
106	106	sudo chmod +x /usr/local/bin/ctop
107	107
108		-lzd
	161	+### lzd
109	109
110	110	DIR=/usr/local/bin \
111	111	bash -c 'curl -fsSL https://raw.githubusercontent.com/jesseduffield/lazydocker/master/scripts/install_update_linux.sh | bash && echo "alias lzd='\''lazydocker'\''" >> "$HOME/.zshrc"'
112		-
113		-