Florian Bobin f-bn

## systemd_service_hardening.md

      
              1 file
            
          
              47 forks
            
          
              8 comments
            
          
              340 stars
            
          
                ageis
                / systemd_service_hardening.md
            
            
              Last active
              June 9, 2024 13:57
            
              
                Options for hardening systemd service units
              
          
    security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict


## 01-generate-ed25519-ssh-key.sh
#!/bin/bash

# generate new personal ed25519 ssh key
ssh-keygen -o -a 100 -t ed25519 -f ~/.ssh/id_ed25519 -C "rob thijssen <rthijssen@gmail.com>"

# generate new host cert authority (host_ca) ed25519 ssh key
# used for signing host keys and creating host certs
ssh-keygen -t ed25519 -f manta_host_ca -C manta.network

eval "$(ssh-agent -s)"

## tmux-cheatsheet.markdown

      
              1 file
            
          
              3263 forks
            
          
              181 comments
            
          
              14348 stars
            
          
                MohamedAlaa
                / tmux-cheatsheet.markdown
            
            
              Last active
              June 13, 2024 05:29
            
              
                tmux shortcuts & cheatsheet
              
          
    tmux shortcuts & cheatsheet

start new:
tmux

start new with session name:
tmux new -s myname
	#!/bin/bash

	# generate new personal ed25519 ssh key
	ssh-keygen -o -a 100 -t ed25519 -f ~/.ssh/id_ed25519 -C "rob thijssen <rthijssen@gmail.com>"

	# generate new host cert authority (host_ca) ed25519 ssh key
	# used for signing host keys and creating host certs
	ssh-keygen -t ed25519 -f manta_host_ca -C manta.network

	eval "$(ssh-agent -s)"