From 42e5f7d97efc69238557a4cb3ad42f2b337cd68b Mon Sep 17 00:00:00 2001 From: dan Date: Fri, 11 Dec 2020 00:04:44 +0100 Subject: [PATCH] oops syntax fix --- setup-01.md | 69 ++++++++++++++++++++++++----------------------------- 1 file changed, 31 insertions(+), 38 deletions(-) diff --git a/setup-01.md b/setup-01.md index d5684f9..b4f6bd3 100644 --- a/setup-01.md +++ b/setup-01.md @@ -2,9 +2,7 @@ ## DNS -DNS-zone presso il registrar - -esempio: accroc.radio +DNS-zone presso il registrar, esempio: accroc.radio ``` * 10800 IN A 10.000.00.001 @@ -19,33 +17,31 @@ www 10800 IN CNAME accroc.radio. Debian 10 -> apt update ; apt upgrade ; apt clean + apt update ; apt upgrade ; apt clean -> apt install sudo ssh screen net-tools htop strace ntp ufw figlet apg wipe -> apt install curl git apt-transport-https tmux byobu man elinks grc dnsutils -> apt install fish tree zip nmap rsync mutt logwatch rkhunter + apt install sudo ssh screen net-tools htop strace ntp ufw figlet apg wipe + apt install curl git apt-transport-https tmux byobu man elinks grc dnsutils + apt install fish tree zip nmap rsync mutt logwatch rkhunter ## Hostname -> hostnamectl set-hostname croco + hostnamectl set-hostname croco -> figlet: figlet cRoc > /etc/motd + figlet: figlet cRoc > /etc/motd ## Firewall -``` -ufw default deny incoming -ufw default allow outgoing -ufw allow ssh -ufw allow 80, 443, 2022, 8000, 8005 -ufw enable -``` + ufw default deny incoming + ufw default allow outgoing + ufw allow ssh + ufw allow 80 (e 443, 2022, 8000, 8005) + ufw enable -Consigliato: cambiare porta sshd, abilitare ssh login passwordless +Consigliato cambiare porta sshd, abilitare ssh login passwordless ## Time -> dpkg-reconfigure tzdata + dpkg-reconfigure tzdata Europe/Rome @@ -71,30 +67,27 @@ set tabstospaces ## Mailserver -> apt install postfix - Posta solo locale. + apt install postfix + Per riconfigurare: -> dpkg-reconfigure postfix + dpkg-reconfigure postfix ## SWAP -> free -h -> fallocate -l 2G /swapfile -> ls -lh /swapfile -> chmod 600 /swapfile -> mkswap /swapfile -> swapon /swapfile -> swapon --show -> sudo cp /etc/fstab /etc/fstab.bak -> echo '/swapfile none swap sw 0 0' | sudo tee -a /etc/fstab -> cat /proc/sys/vm/swappiness -> sysctl vm.swappiness=10 -> echo vm.swappiness=10 >> /etc/sysctl.conf -> cat /proc/sys/vm/vfs_cache_pressure -> sysctl vm.vfs_cache_pressure=50 -> echo vm.vfs_cache_pressure=50 >> /etc/sysctl.conf - - + free -h + fallocate -l 2G /swapfile + chmod 600 /swapfile + mkswap /swapfile + swapon /swapfile + swapon --show + sudo cp /etc/fstab /etc/fstab.bak + echo '/swapfile none swap sw 0 0' | sudo tee -a /etc/fstab + cat /proc/sys/vm/swappiness + sysctl vm.swappiness=10 + echo vm.swappiness=10 >> /etc/sysctl.conf + cat /proc/sys/vm/vfs_cache_pressure + sysctl vm.vfs_cache_pressure=50 + echo vm.vfs_cache_pressure=50 >> /etc/sysctl.conf