Изменения документа Proxy

Сводка

• Свойства страницы (1 изменено, 0 добавлено, 0 удалено)

Подробности

Свойства страницы

Содержимое

...	...	@@ -2,6 +2,8 @@
2	2
3	3	nano disable_ping.sh
4	4
	5	+-- НЕ ввезде прокатывает )) Зависит от Хостера
	6	+
5	5	#!/usr/bin/env bash
6	6	set -e
7	7
...	...	@@ -52,7 +52,7 @@
52	52
53	53	--
54	54
55		- базовая настройка:
	57	+базовая настройка:
56	56
57	57	# UFW
58	58	sudo ufw default deny incoming
...	...	@@ -59,10 +59,58 @@
59	59	sudo ufw default allow outgoing
60	60	sudo ufw allow OpenSSH
61	61	sudo ufw enable
62		-
63		- # fail2ban (ssh-джейл по умолчанию)
64		- sudo systemctl enable --now fail2ban
65	65
	65	+
	66	+`sudo apt install fail2ban -y
	67	+sudo bash -c 'cat > /etc/fail2ban/jail.local << "JAIL"
	68	+[DEFAULT]
	69	+bantime = 24h
	70	+findtime = 10m
	71	+maxretry = 3
	72	+
	73	+bantime.increment = true
	74	+bantime.factor = 2
	75	+bantime.maxtime = 4w
	76	+
	77	+banaction = iptables-multiport
	78	+banaction_allports = iptables-allports
	79	+
	80	+ignoreip = 127.0.0.1/8 ::1
	81	+
	82	+[sshd]
	83	+enabled = true
	84	+logpath = %(sshd_log)s
	85	+backend = %(sshd_backend)s
	86	+maxretry = 3
	87	+bantime = 48h
	88	+findtime = 15m
	89	+mode = aggressive
	90	+
	91	+[sshd-ddos]
	92	+enabled = true
	93	+logpath = %(sshd_log)s
	94	+backend = %(sshd_backend)s
	95	+maxretry = 5
	96	+bantime = 24h
	97	+findtime = 30s
	98	+
	99	+[recidive]
	100	+enabled = true
	101	+logpath = /var/log/fail2ban.log
	102	+maxretry = 3
	103	+bantime = 4w
	104	+findtime = 7d
	105	+banaction = iptables-allports
	106	+JAIL
	107	+apt-get update
	108	+apt-get install -y fail2ban
	109	+systemctl enable --now fail2ban
	110	+systemctl restart fail2ban
	111	+echo "fail2ban настроен и запущен"
	112	+'
	113	+systemctl enable fail2ban
	114	+systemctl restart fail2ban`
	115	+
66	66	# ZSH
67	67
68	68	sudo apt update && sudo apt install -y zsh git fonts-powerline curl && \
...	...	@@ -100,16 +100,14 @@
100	100	chmod +x $DOCKER_CONFIG/cli-plugins/docker-compose
101	101	docker compose version
102	102
103		-Управление докером
	153	+## Управление докером
104	104
105		-## ctop
	155	+### ctop
106	106
107	107	sudo wget https://github.com/bcicen/ctop/releases/download/v0.7.7/ctop-0.7.7-linux-amd64 -O /usr/local/bin/ctop
108	108	sudo chmod +x /usr/local/bin/ctop
109	109
110		-## lzd
	160	+### lzd
111	111
112	112	DIR=/usr/local/bin \
113	113	bash -c 'curl -fsSL https://raw.githubusercontent.com/jesseduffield/lazydocker/master/scripts/install_update_linux.sh | bash && echo "alias lzd='\''lazydocker'\''" >> "$HOME/.zshrc"'
114		-
115		-