diff options
-rw-r--r-- | TODO.md | 2 |
1 files changed, 2 insertions, 0 deletions
@@ -43,6 +43,7 @@ Puppet modules ### Security +- [DHE params deployment](https://weakdh.org/sysadmin.html). - badusb mitigations. - knock integration via https://github.com/juasiepo/knockd - apache: @@ -126,6 +127,7 @@ Puppet modules - cleanup hidden `/.gem`. - use prompt.sh from bash-prompt as a submodule. - mail: + - use ssl::dhparams, move to 2048 bit and use the standard file names and paths. - schleuder: manage `/etc/schleuder/schleuder.conf`, using `superadminaddr: root` or other recipient, to avoid mails sent as `root@localhost`. - deploy https://git.autistici.org/ale/smtp-fp/tree/master |