The details look great!
And summit isn't open source either
To be fair they probably had most of the code ready, and just had to port it to Lemmy.
Any reason why it's not FOSS?
... Directory?
Hi,
Reading the thread I decided to give it a go, I went ahead and configured crowdsec. I have a few questions, if I may, here's the setup:
- I have set up the basic collections/parsers (mainly nginx/linux/sshd/base-http-scenarios/http-cve)
- I only have two services open on the firewall, https and ssh (no root login, ssh key only)
- I have set up the firewall bouncer.
If I understand correctly, any attack detected will result in the ip being banned via iptables rule (for a configured duration, by default 4 hours).
- Is there any added value to run the nginx bouncer on top of that, or any other?
- cscli hub update/upgrade will fetch new definitions for collections if I undestand correctly. Is there any need to run this regularly, scheduled with let's say a cron job, or does crowdsec do that automatically in the background?
sometimes I grab popcorn and "tail -f /var/log/secure"
Didn't have any crashes, the only small issue I have is that scrolling isn't always very smooth, although it's better with the latest release.
I went to the playstore, and looked for boost. Although it's not yet released, it already lists the data that will be collected (quite a lot).
Meanwhile jerboa states that it collects and shares no data. It has room for improvement, but it's fully functional and fits my needs for browsing Lemmy.
Do you have a link to a documentation concerning retention/cleanup for instances?
And comment posting bots. Since there's no karma there should be no market value for accounts right? Am I missing something or does that kind of solve the problem? We could still see trolls using Ai to comment randomly
Then you're allowed