Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EP
epyon22 @programming.dev
Posts 0
Comments 94
Suggestions for Improving Linux Server Security: Beyond User Permissions and Groups?
  • I would reconsider docker because if a specific application leaks some sort of shell access or system file access you'll be protected out side of container host escalation.

    Unrelated to security, I prefer docker because it leaves the server very clean if you remove different apps. Can also save time configuring more complex applications or applications that conflict with system libraries.

    Add fail2ban on your list of applications it watches logs for invalid logins and puts them on firewall block rules after so many failed attempts.

  • I'm at a loss on what server to buy
  • I made the jump to a full server a few years ago and there's some pretty high limits but you can get them spec'ed pretty low. Something like a dell r730 Single 8 core xenon 32gb ram and a couple tb of storage running 4-500$. They can be upgraded over time to be dual 16 core xenon 1tb ram and petabyte of storage.

  • *Permanently Deleted*
  • It's really gameplay vs story. Ott heavy on game play where ff7 can be like reading a book. nothing really revolutionary about its game play some beautiful backgrounds and a deep storyline. Ott has some seriously revolutionary 3d interactions.

  • dnscrypt-proxy2 routed through tor
  • Is this whatismyip address on the dns server that should have all its traffic going through tor or just DNS? what is my ip address works by responding with the ip address that is connecting to it. If you are only trying to have dns go over tor what is my ip would respond with a non tor ip address but if all traffic is going through tor then yes something is not working.

    Edit: Reading more in depth of your post 100% whatismyipaddress will not return your tor ip. You've just offloaded name resultion ie. www.google.com is 123.123.123.123 ip address. You are still connecting to websites with your ISP ip.