3 ms·
AFAIK all software on Streisand does not auto update so you need to redeploy periodically (and the repo hasn’t been updated in a while, the main author has litt
by nsomaru 8y ago
AFAIK all software on Streisand does not auto update so you need to redeploy periodically (and the repo hasn’t been updated in a while, the main author has little time for it anymore) which isn’t great if you’ve shared certs with non technical users
- adamfeldman 8y agoFurther detail for the curious: Recent enhancements to Streisand include automatic updates for Wireguard: https://github.com/StreisandEffect/streisand/issues/513#issuecomment-431588195 https://github.com/StreisandEffect/streisand/issues/513#issu.... Streisand automatically installs Ubuntu security and other updates using the "unattended-upgrades" package: https://help.ubuntu.com/community/AutomaticSecurityUpdates https://help.ubuntu.com/community/AutomaticSecurityUpdates. Streisand's unattended-upgrades config https://github.com/StreisandEffect/streisand/blob/master/playbooks/roles/common/templates/50unattended-upgrades.j2 https://github.com/StreisandEffect/streisand/blob/master/pla...
- nsomaru 8y agoStreisand installs around 70 different services. If all of them are not patched there’s a good chance your box becomes vulnerable over time. Remember, you’re piping all your internet traffic through this box.
- sascha_sl 8y agoit's modular if you enter the extended configuration, poster above mentioned it runs "nothing but wireguard"