70 lines
2.2 KiB
YAML
70 lines
2.2 KiB
YAML
---
|
|
sysctl_dev_tty_ldisc_autoload: 0
|
|
sysctl_net_ipv6_conf_accept_ra_rtr_pref: 0
|
|
|
|
ipv4_sysctl_settings:
|
|
net.ipv4.conf.all.accept_redirects: 0
|
|
net.ipv4.conf.all.accept_source_route: 0
|
|
net.ipv4.conf.all.log_martians: 1
|
|
net.ipv4.conf.all.rp_filter: 1
|
|
net.ipv4.conf.all.secure_redirects: 0
|
|
net.ipv4.conf.all.send_redirects: 0
|
|
net.ipv4.conf.all.shared_media: 0
|
|
net.ipv4.conf.default.accept_redirects: 0
|
|
net.ipv4.conf.default.accept_source_route: 0
|
|
net.ipv4.conf.default.log_martians: 1
|
|
net.ipv4.conf.default.rp_filter: 1
|
|
net.ipv4.conf.default.secure_redirects: 0
|
|
net.ipv4.conf.default.send_redirects: 0
|
|
net.ipv4.conf.default.shared_media: 0
|
|
net.ipv4.icmp_echo_ignore_broadcasts: 1
|
|
net.ipv4.icmp_ignore_bogus_error_responses: 1
|
|
net.ipv4.ip_forward: 0
|
|
net.ipv4.tcp_challenge_ack_limit: 2147483647
|
|
net.ipv4.tcp_invalid_ratelimit: 500
|
|
net.ipv4.tcp_max_syn_backlog: 20480
|
|
net.ipv4.tcp_rfc1337: 1
|
|
net.ipv4.tcp_syn_retries: 5
|
|
net.ipv4.tcp_synack_retries: 2
|
|
net.ipv4.tcp_syncookies: 1
|
|
|
|
ipv6_sysctl_settings:
|
|
net.ipv6.conf.all.accept_ra: 0
|
|
net.ipv6.conf.all.accept_redirects: 0
|
|
net.ipv6.conf.all.accept_source_route: 0
|
|
net.ipv6.conf.all.forwarding: 0
|
|
net.ipv6.conf.all.use_tempaddr: 2
|
|
net.ipv6.conf.default.accept_ra: 0
|
|
net.ipv6.conf.default.accept_ra_defrtr: 0
|
|
net.ipv6.conf.default.accept_ra_pinfo: 0
|
|
net.ipv6.conf.default.accept_ra_rtr_pref: 0
|
|
net.ipv6.conf.default.accept_redirects: 0
|
|
net.ipv6.conf.default.accept_source_route: 0
|
|
net.ipv6.conf.default.autoconf: 0
|
|
net.ipv6.conf.default.dad_transmits: 0
|
|
net.ipv6.conf.default.max_addresses: 1
|
|
net.ipv6.conf.default.router_solicitations: 0
|
|
net.ipv6.conf.default.use_tempaddr: 2
|
|
|
|
generic_sysctl_settings:
|
|
fs.protected_fifos: 2
|
|
fs.protected_hardlinks: 1
|
|
fs.protected_symlinks: 1
|
|
fs.suid_dumpable: 0
|
|
kernel.core_uses_pid: 1
|
|
kernel.dmesg_restrict: 1
|
|
kernel.kptr_restrict: 2
|
|
kernel.panic: 60
|
|
kernel.panic_on_oops: 60
|
|
kernel.perf_event_paranoid: 3
|
|
kernel.randomize_va_space: 2
|
|
kernel.sysrq: 0
|
|
kernel.unprivileged_bpf_disabled: 1
|
|
kernel.yama.ptrace_scope: 2
|
|
net.core.bpf_jit_harden: 2
|
|
|
|
conntrack_sysctl_settings:
|
|
net.netfilter.nf_conntrack_max: 2000000
|
|
net.netfilter.nf_conntrack_tcp_loose: 0
|
|
...
|