Commit Graph
8 Commits
Author SHA1 Message Date
Daniel Winzen 825a2967e2 Build custom libssh2 and enable hmac-sha2-512 as best matching MAC 2020-07-19 13:33:53 +02:00
Daniel Winzen 401b87d3ea Add curve25519-sha256 to KexAlgorithms 2019-05-06 20:05:16 +02:00
Daniel Winzen dfe7f7d9e7 when shell access is enabled, we shouldn't use force-command in sshd_config 2019-01-06 19:35:49 +01:00
Daniel Winzen 4b25310396 Simplified sshd_config 2018-12-07 13:25:30 +01:00
Joe Testa e4e59782ca Disabled RSA host key type (because small keys are generated by default), as well as ECDSA (due to suspicions of NSA-compromised P-curves). Enabled only strong key exchange, cipher, and MAC algorithms. See https://www.sshaudit.com/ and https://github.com/arthepsy/ssh-audit. 2018-11-19 15:01:11 -05:00
Daniel Winzen fa24bb61ec Added PHP 7.2 support + minor bugfixes and performance tweaks
Note when applying this update you will have to update existing nginx vhosts to match new listening addresses (IPv6). Preferably you should update them to unix socket though and apply the changes to the tor hidden service config as well
2018-02-10 22:10:07 +01:00
Daniel Winzen 94ef1125e2 Remove deprecated option 2017-06-24 13:17:57 +02:00
Daniel Winzen e0b35fb943 Initial commit 2017-04-30 19:32:42 +02:00