diff options
| -rw-r--r-- | TODO.md | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -43,13 +43,13 @@ Puppet modules ### Security -- [DHE params deployment](https://weakdh.org/sysadmin.html). - badusb mitigations. - knock integration via https://github.com/juasiepo/knockd - apache: - https://httpd.apache.org/docs/2.4/upgrading.html - try libapache2-modsecurity. - deploy https://git.immerda.ch/csp-report/ + - disable other_vhosts_access.log - apt: check if squeeze-lts is being automatically processed. - loginrecords: deploy module. - ssh: @@ -128,6 +128,7 @@ Puppet modules - mail: - support for [preventing SPAM connections with bird](http://www.debian-administration.org/article/715/Preventing_SPAM_connections_with_bird.). - use ssl::dhparams, move to 2048 bit and use the standard file names and paths. + - [Feature #4012: postfix: ship 2048bit dh parameters - Platform - LEAP Issue Tracker](https://leap.se/code/issues/4012) - schleuder: manage `/etc/schleuder/schleuder.conf`, using `superadminaddr: root` or other recipient, to avoid mails sent as `root@localhost`. - deploy https://git.autistici.org/ale/smtp-fp/tree/master |