From f4f04a32b2f53418967236c21551c5016730e37d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thorben=20G=C3=BCnther?= Date: Tue, 6 Jun 2023 22:45:33 +0200 Subject: [PATCH] Add security practices --- index.md | 3 +++ security.md | 5 +++++ 2 files changed, 8 insertions(+) create mode 100644 security.md diff --git a/index.md b/index.md index 20f0b47..1c1fa41 100644 --- a/index.md +++ b/index.md @@ -1,6 +1,9 @@ # [Infrastructure] +[Security] practices + [Redis setup] [Infrastructure]: https://hub.xenrox.net/~xenrox/Infrastructure/ +[Security]: security.md [Redis setup]: redis.md diff --git a/security.md b/security.md new file mode 100644 index 0000000..e822d8f --- /dev/null +++ b/security.md @@ -0,0 +1,5 @@ +# SSH + +- No password authentication, SSH keys only +- Use `AllowUsers` to whitelist accounts +- Block failed login attempts with Fail2ban -- 2.44.0