4 ms·
fail2ban and rkhunter are in the kit, and that offsets some of the issues: you get some assurance and protection right there out of the box. You can also comme
by PaulRobinson 7y ago
fail2ban and rkhunter are in the kit, and that offsets some of the issues: you get some assurance and protection right there out of the box.
You can also comment out the bits you don't want from https://github.com/sovereign/sovereign/blob/master/site.yml https://github.com/sovereign/sovereign/blob/master/site.yml before you run the top level playbook.
- sneak 7y agofail2ban is security theater. Turn off password-based ssh authentication, use keys only, and you’re done. You don’t need additional software for it. For extra security, bind ssh to localhost only and run a tor hidden service on the machine for accessing it.