cominfra/documentation
cominfra
/
documentation
8
0
Fork 0
Code Issues 5 Pull Requests Activity

pm/: correction gardefou et sauvkipeu

This commit is contained in:
Adrien Bourmault 2024-06-18 13:44:49 +02:00
parent 286e5fd9ad
commit e926a319ae
Signed by: neox
GPG Key ID: 57BC26A3687116F6
2 changed files with 30 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
pm/gardefou.md
View File

@ -1,7 +1,7 @@
# gardefou
Type : machine physique.
Localisation : `leparc`, en attendant une migration vers `fontainebleau`.
Localisation : `fontainebleau`.
## Matériel
@ -25,7 +25,7 @@ Mail Transfer Agent : `postfix`
## Caractéristiques notables
Domaine : `gardefou.libre-en-communs.org`
Adresse ipv6 publique : `2001:910:1021::5`
Adresse ipv6 publique : `2001:910:1028::5`
### Configuration réseau
@ -39,8 +39,8 @@ Adresse ipv6 publique : `2001:910:1021::5`
allow-hotplug eno0
iface eno0 inet6 static
address 2001:910:1021:0::5/128
gateway 2001:910:1021::1
address 2001:910:1028:0::5/128
gateway 2001:910:1028::1
</details>
@ -49,11 +49,31 @@ Adresse ipv6 publique : `2001:910:1021::5`
### /etc/ssh/sshd_config
<details>
TODO?
Port 222
AddressFamily any
ListenAddress 0.0.0.0
ListenAddress ::
PubkeyAuthentication yes
PasswordAuthentication no
PermitEmptyPasswords no
ChallengeResponseAuthentication no
# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
KbdInteractiveAuthentication no
UsePAM yes
AllowAgentForwarding yes
AllowTcpForwarding yes
GatewayPorts yes
X11Forwarding no
PrintMotd no
TCPKeepAlive yes
PermitTunnel yes
AcceptEnv LANG LC_* GIT_*
Subsystem sftp /usr/lib/openssh/sftp-server
Match User admin666 Address *,!127.0.0.1,!::1
DenyUsers admin666
Match User borg Address *,!2001:910:1021:0::/64,!2001:910:1028:0::/64
DenyUsers borg
</details>

12
pm/sauvkipeu.md
View File

@ -1,7 +1,7 @@
# sauvkipeu
Type : machine physique.
Localisation : leparc.
Localisation : `leparc`.
## Matériel
@ -53,29 +53,19 @@ Adresse ipv6 publique : `2001:910:1021::4`
AddressFamily any
ListenAddress 0.0.0.0
ListenAddress ::
PubkeyAuthentication yes
PasswordAuthentication no
PermitEmptyPasswords no
ChallengeResponseAuthentication no
UsePAM yes
AllowAgentForwarding yes
AllowTcpForwarding yes
GatewayPorts yes
X11Forwarding no
PrintMotd no
TCPKeepAlive yes
PermitTunnel yes
AcceptEnv LANG LC_* GIT_*
Subsystem sftp /usr/lib/openssh/sftp-server
Match User admin666 Address *,!127.0.0.1,!::1