Изменения документа Proxy

Сводка

• Свойства страницы (1 изменено, 0 добавлено, 0 удалено)

Подробности

Свойства страницы

Содержимое

...	...	@@ -1,9 +3,5 @@
1		-# Отключение ICMP
2		-
3	3	nano disable_ping.sh
4	4
5		--- НЕ ввезде прокатывает )) Зависит от Хостера
6		-
7	7	#!/usr/bin/env bash
8	8	set -e
9	9
...	...	@@ -24,7 +24,7 @@
24	24
25	25	chmod +x disable_ping.sh && ./disable_ping.sh
26	26
27		-# Утилиты
	23	+Утилиты
28	28
29	29	sudo apt update && sudo apt upgrade -y && \
30	30	sudo apt install -y \
...	...	@@ -54,7 +54,7 @@
54	54
55	55	--
56	56
57		-базовая настройка:
	53	+ базовая настройка:
58	58
59	59	# UFW
60	60	sudo ufw default deny incoming
...	...	@@ -61,60 +61,12 @@
61	61	sudo ufw default allow outgoing
62	62	sudo ufw allow OpenSSH
63	63	sudo ufw enable
	60	+
	61	+ # fail2ban (ssh-джейл по умолчанию)
	62	+ sudo systemctl enable --now fail2ban
64	64
65		-
66		-`sudo apt install fail2ban -y
67		-sudo bash -c 'cat > /etc/fail2ban/jail.local << "JAIL"
68		-[DEFAULT]
69		-bantime = 24h
70		-findtime = 10m
71		-maxretry = 3
	64	+ZSH
72	72
73		-bantime.increment = true
74		-bantime.factor = 2
75		-bantime.maxtime = 4w
76		-
77		-banaction = iptables-multiport
78		-banaction_allports = iptables-allports
79		-
80		-ignoreip = 127.0.0.1/8 ::1
81		-
82		-[sshd]
83		-enabled = true
84		-logpath = %(sshd_log)s
85		-backend = %(sshd_backend)s
86		-maxretry = 3
87		-bantime = 48h
88		-findtime = 15m
89		-mode = aggressive
90		-
91		-[sshd-ddos]
92		-enabled = true
93		-logpath = %(sshd_log)s
94		-backend = %(sshd_backend)s
95		-maxretry = 5
96		-bantime = 24h
97		-findtime = 30s
98		-
99		-[recidive]
100		-enabled = true
101		-logpath = /var/log/fail2ban.log
102		-maxretry = 3
103		-bantime = 4w
104		-findtime = 7d
105		-banaction = iptables-allports
106		-JAIL
107		-apt-get update
108		-apt-get install -y fail2ban
109		-systemctl enable --now fail2ban
110		-systemctl restart fail2ban
111		-echo "fail2ban настроен и запущен"
112		-'
113		-systemctl enable fail2ban
114		-systemctl restart fail2ban`
115		-
116		-# ZSH
117		-
118	118	sudo apt update && sudo apt install -y zsh git fonts-powerline curl && \
119	119	sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)" "" --unattended && \
120	120	sed -i 's/^ZSH_THEME=.*/ZSH_THEME="agnoster"/' ~/.zshrc && \
...	...	@@ -140,7 +140,7 @@
140	140
141	141	--
142	142
143		-# Докер
	91	+Докер
144	144
145	145	sudo curl -fsSL https://get.docker.com | sh &&
146	146	LATEST=$(curl -sL https://api.github.com/repos/docker/compose/releases/latest | grep '"tag_name":' | cut -d'"' -f4)
...	...	@@ -150,14 +150,16 @@
150	150	chmod +x $DOCKER_CONFIG/cli-plugins/docker-compose
151	151	docker compose version
152	152
153		-## Управление докером
	101	+Управление докером
154	154
155		-### ctop
	103	+ctop
156	156
157	157	sudo wget https://github.com/bcicen/ctop/releases/download/v0.7.7/ctop-0.7.7-linux-amd64 -O /usr/local/bin/ctop
158	158	sudo chmod +x /usr/local/bin/ctop
159	159
160		-### lzd
	108	+lzd
161	161
162	162	DIR=/usr/local/bin \
163	163	bash -c 'curl -fsSL https://raw.githubusercontent.com/jesseduffield/lazydocker/master/scripts/install_update_linux.sh | bash && echo "alias lzd='\''lazydocker'\''" >> "$HOME/.zshrc"'
	112	+
	113	+