Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add IPAddressDeny= to systemd units #51

Open
6 tasks
JGoutin opened this issue Oct 11, 2022 · 0 comments
Open
6 tasks

Add IPAddressDeny= to systemd units #51

JGoutin opened this issue Oct 11, 2022 · 0 comments
Assignees
@JGoutin
Labels
enhancement New feature or request security Related to security hardening
Milestone
2.4.0

Comments

@JGoutin
Copy link
Owner

JGoutin commented Oct 11, 2022

Add IPAddressDeny= to systemd units and populate it according to firewall rules. Should also deny localhost by default.

  • nginx
  • php-fpm
  • kodi
  • mpd
  • postgresql
  • mail

REF: https://www.freedesktop.org/software/systemd/man/systemd.resource-control.html#IPAddressAllow=ADDRESS%5B/PREFIXLENGTH%5D%E2%80%A6
@JGoutin JGoutin self-assigned this Oct 11, 2022
@JGoutin JGoutin changed the title Add IPAddressDeny= to systemd configuration and populate it according to Add IPAddressDeny= to systemd units Oct 11, 2022
@JGoutin JGoutin added enhancement New feature or request security Related to security hardening labels Oct 11, 2022
@JGoutin JGoutin added this to the 2.1.0 milestone Mar 29, 2023
@JGoutin JGoutin modified the milestones: 2.1.0, 2.2.0 Apr 14, 2023
@JGoutin JGoutin modified the milestones: 2.2.0, 2.3.0 Sep 13, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@JGoutin JGoutin

Labels
enhancement New feature or request security Related to security hardening
Projects
None yet
Milestone
2.4.0
Development

No branches or pull requests
1 participant
@JGoutin