Refactor AIDE configuration and add exclusion paths

2024-10-05 21:19:51 +02:00
parent 9c02c2b839
commit 90852bb9a6
13 changed files with 47 additions and 22 deletions
@@ -84,6 +84,13 @@ fail2ban_jails:
    findtime: 600
    bantime: 3600

+# aide
+install_aide: true
+aide_exclude:
+  - "!/var/lib/snapd"
+  - "!/mnt/microk8s_persistent"
+  - "!/var/lib/encrypted_volumes"
+
 # Unattended upgrades
 unattended_reboot: true
 unattended_reboot_time: "04:30"