2022-12-30 10:26:28 +01:00
|
|
|
# gardefou
|
|
|
|
|
|
|
|
|
|
Type : machine physique.
|
2024-06-18 13:44:49 +02:00
|
|
|
Localisation : `fontainebleau`.
|
2022-12-30 10:26:28 +01:00
|
|
|
|
|
|
|
|
## Matériel
|
|
|
|
|
|
|
|
|
|
Lenovo W500 (même si c'est marqué T500 sur le chassis)
|
|
|
|
|
Divers : pas de caméra + détecteur empreinte + plasturgie très bof notamment un côté d'écran un peu fondu
|
|
|
|
|
CPU : Intel(R) Core(TM)2 Duo CPU T9400 @ 2.53GHz (mais au repos tourne à 800 MHz), bus 1 066 MHz, cache L2 6 Mo
|
2023-04-25 12:26:50 +02:00
|
|
|
RAM : 2 x 2 Go DDR3 (à passer à 2 x 4 Go en DDR3 un jour)
|
|
|
|
|
Disque interne : SSD Crucial MX500 250 Go
|
|
|
|
|
Disque externe : Toshiba Canvio Flex Exclusive 4 To Argent (HDTX140MSCCA, USB3)
|
2022-12-30 10:26:28 +01:00
|
|
|
Alimentation : boitier 65W
|
|
|
|
|
|
|
|
|
|
## Logiciel
|
|
|
|
|
|
2024-06-17 20:03:55 +02:00
|
|
|
Micro-programme : GNU Boot 0.1-rc3
|
2022-12-30 10:26:28 +01:00
|
|
|
Système d'exploitation : Debian GNU/Linux-libre 11 (Bullseye)
|
|
|
|
|
Noyau : Linux-libre LTS (`linux-libre-lts` des dépôts https://linux-libre.fsfla.org)
|
|
|
|
|
Audit des paquets mensuel : `vrms`
|
|
|
|
|
Sécurités de la maintenance : `etckeeper`, `mollyguard`, `tig`, `lm-sensors`, `fancontrol`, `screen`
|
|
|
|
|
Mail Transfer Agent : `postfix`
|
|
|
|
|
|
|
|
|
|
## Caractéristiques notables
|
|
|
|
|
|
2024-06-17 20:03:55 +02:00
|
|
|
Domaine : `gardefou.libre-en-communs.org`
|
2024-06-18 13:44:49 +02:00
|
|
|
Adresse ipv6 publique : `2001:910:1028::5`
|
2022-12-30 10:26:28 +01:00
|
|
|
|
|
|
|
|
### Configuration réseau
|
|
|
|
|
|
|
|
|
|
#### /etc/network/interfaces
|
|
|
|
|
<details>
|
2022-12-30 11:35:03 +01:00
|
|
|
|
|
|
|
|
auto lo
|
|
|
|
|
iface lo inet loopback
|
|
|
|
|
|
|
|
|
|
# The primary network interface
|
|
|
|
|
allow-hotplug eno0
|
|
|
|
|
|
|
|
|
|
iface eno0 inet6 static
|
2024-06-18 13:44:49 +02:00
|
|
|
address 2001:910:1028:0::5/128
|
|
|
|
|
gateway 2001:910:1028::1
|
2022-12-30 11:35:03 +01:00
|
|
|
|
2022-12-30 10:26:28 +01:00
|
|
|
</details>
|
|
|
|
|
|
|
|
|
|
## Configuration SSH
|
|
|
|
|
|
|
|
|
|
### /etc/ssh/sshd_config
|
|
|
|
|
<details>
|
2022-12-30 11:35:03 +01:00
|
|
|
|
2024-06-18 13:44:49 +02:00
|
|
|
Port 222
|
|
|
|
|
AddressFamily any
|
|
|
|
|
ListenAddress 0.0.0.0
|
|
|
|
|
ListenAddress ::
|
|
|
|
|
PubkeyAuthentication yes
|
|
|
|
|
PasswordAuthentication no
|
|
|
|
|
PermitEmptyPasswords no
|
|
|
|
|
ChallengeResponseAuthentication no
|
|
|
|
|
# Change to yes to enable challenge-response passwords (beware issues with
|
|
|
|
|
# some PAM modules and threads)
|
|
|
|
|
KbdInteractiveAuthentication no
|
|
|
|
|
UsePAM yes
|
|
|
|
|
AllowAgentForwarding yes
|
|
|
|
|
AllowTcpForwarding yes
|
|
|
|
|
GatewayPorts yes
|
|
|
|
|
X11Forwarding no
|
|
|
|
|
PrintMotd no
|
|
|
|
|
TCPKeepAlive yes
|
|
|
|
|
PermitTunnel yes
|
|
|
|
|
AcceptEnv LANG LC_* GIT_*
|
|
|
|
|
Subsystem sftp /usr/lib/openssh/sftp-server
|
|
|
|
|
Match User admin666 Address *,!127.0.0.1,!::1
|
|
|
|
|
DenyUsers admin666
|
|
|
|
|
Match User borg Address *,!2001:910:1021:0::/64,!2001:910:1028:0::/64
|
|
|
|
|
DenyUsers borg
|
2022-12-30 11:35:03 +01:00
|
|
|
|
2022-12-30 10:26:28 +01:00
|
|
|
</details>
|
|
|
|
|
|
|
|
|
|
## Configuration MTA
|
|
|
|
|
|
|
|
|
|
### /etc/postfix/transport
|
|
|
|
|
|
|
|
|
|
a-lec.org :
|
|
|
|
|
* discard:
|
|
|
|
|
|
|
|
|
|
### /etc/postfix/virtual
|
|
|
|
|
|
|
|
|
|
@localhost admin@a-lec.org
|
|
|
|
|
@aunt.libre-en-communs.org admin@a-lec.org
|
|
|
|
|
|
|
|
|
|
## Désactivation du suspend à la fermeture du capot
|
|
|
|
|
|
|
|
|
|
Éditer le fichier `/etc/systemd/logind.conf` :
|
|
|
|
|
```
|
|
|
|
|
#HandleLidSwitch=suspend
|
|
|
|
|
+ HandleLidSwitch=ignore
|
|
|
|
|
```
|
|
|
|
|
Puis redémarrage du service :
|
|
|
|
|
```
|
|
|
|
|
systemctl restart systemd-logind.service
|
|
|
|
|
```
|
