Commit Graph

8 Commits

Author SHA1 Message Date
Daniel Winzen
825a2967e2 Build custom libssh2 and enable hmac-sha2-512 as best matching MAC 2020-07-19 13:33:53 +02:00
Daniel Winzen
401b87d3ea Add curve25519-sha256 to KexAlgorithms 2019-05-06 20:05:16 +02:00
Daniel Winzen
dfe7f7d9e7 when shell access is enabled, we shouldn't use force-command in sshd_config 2019-01-06 19:35:49 +01:00
Daniel Winzen
4b25310396 Simplified sshd_config 2018-12-07 13:25:30 +01:00
Joe Testa
e4e59782ca Disabled RSA host key type (because small keys are generated by default), as well as ECDSA (due to suspicions of NSA-compromised P-curves). Enabled only strong key exchange, cipher, and MAC algorithms. See https://www.sshaudit.com/ and https://github.com/arthepsy/ssh-audit. 2018-11-19 15:01:11 -05:00
Daniel Winzen
fa24bb61ec Added PHP 7.2 support + minor bugfixes and performance tweaks
Note when applying this update you will have to update existing nginx vhosts to match new listening addresses (IPv6). Preferably you should update them to unix socket though and apply the changes to the tor hidden service config as well
2018-02-10 22:10:07 +01:00
Daniel Winzen
94ef1125e2 Remove deprecated option 2017-06-24 13:17:57 +02:00
Daniel Winzen
e0b35fb943 Initial commit 2017-04-30 19:32:42 +02:00