Malin/WPIQ
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #308 from WordOps/updating-configuration

Browse Source 
Several bug fixes
This commit is contained in:
VirtuBox
2020-08-20 13:50:14 +02:00
committed by GitHub
parent 21e7619822 f0cbc77602
commit dce6b111b0
7 changed files with 55 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
wo/cli/templates/fail2ban.mustache
View File

@@ -4,7 +4,7 @@ ignoreip = 127.0.0.1/8 ::1
[recidive]
enabled = true
[nginx-http-auth]
{{#nginx}}[nginx-http-auth]
enabled = true
logpath = /var/log/nginx/*error*.log
@@ -23,4 +23,4 @@ maxretry = 5
enabled = true
filter = nginx-forbidden
action = iptables-multiport[name="nginx-forbidden", port="http,https"]
logpath = /var/log/nginx/*error*.log
logpath = /var/log/nginx/*error*.log{{/nginx}}

24
wo/cli/templates/proftpd-tls.mustache
View File

@@ -1,12 +1,20 @@
<IfModule mod_tls.c>
TLSEngine on
TLSLog /var/log/proftpd/tls.log
TLSProtocol TLSv1.2
TLSCipherSuite AES256+EECDH:AES256+EDH
TLSOptions NoCertRequest AllowClientRenegotiations NoSessionReuseRequired
TLSRSACertificateFile /etc/proftpd/ssl/proftpd.crt
TLSRSACertificateKeyFile /etc/proftpd/ssl/proftpd.key
TLSEngine on
TLSRequired on
TLSLog /var/log/proftpd/tls.log
# intermediate configuration from ssl-config.mozilla.org
TLSProtocol TLSv1.2 TLSv1.3
TLSCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
TLSServerCipherPreference off
TLSessionTickets off
TLSOptions NoCertRequest AllowClientRenegotiations NoSessionReuseRequired
TLSRSACertificateFile /etc/proftpd/ssl/proftpd.crt
TLSRSACertificateKeyFile /etc/proftpd/ssl/proftpd.key
TLSVerifyClient off
TLSRequired on
RequireValidShell no
</IfModule>

2
wo/cli/templates/sshd.mustache
View File

@@ -28,7 +28,7 @@ ChallengeResponseAuthentication no
UsePAM yes
X11Forwarding yes
#PrintMotd no
PrintMotd yes
# Allow client to pass locale environment variables
AcceptEnv LANG LC_*