@@ -26,19 +26,19 @@ output(){
2626systemctl mask debug-shell.service
2727
2828# # Avoid phased updates
29- curl -s https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts /main/etc/apt/apt.conf.d/99sane-upgrades | tee /etc/apt/apt.conf.d/99sane-upgrades > /dev/null
29+ curl -s https://raw.githubusercontent.com/Metropolis-nexus/Common-Files /main/etc/apt/apt.conf.d/99sane-upgrades | tee /etc/apt/apt.conf.d/99sane-upgrades > /dev/null
3030
3131# Setup NTS
32- curl -s https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts /refs/heads/main/etc/chrony/conf.d/10-custom.conf | tee /etc/chrony/conf.d/10-custom.conf > /dev/null
32+ curl -s https://raw.githubusercontent.com/Metropolis-nexus/Common-Files /refs/heads/main/etc/chrony/conf.d/10-custom.conf | tee /etc/chrony/conf.d/10-custom.conf > /dev/null
3333systemctl restart chronyd
3434
3535# Harden SSH
36- curl -s https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts /main/etc/ssh/sshd_config.d/10-custom.conf | tee /etc/ssh/sshd_config.d/10-custom.conf > /dev/null
36+ curl -s https://raw.githubusercontent.com/Metropolis-nexus/Common-Files /main/etc/ssh/sshd_config.d/10-custom.conf | tee /etc/ssh/sshd_config.d/10-custom.conf > /dev/null
3737sed -i ' s/PermitRootLogin no/PermitRootLogin yes/g' /etc/ssh/sshd_config.d/10-custom.conf
38- curl -s https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts /main/etc/ssh/ssh_config.d/10-custom.conf | tee /etc/ssh/ssh_config.d/10-custom.conf > /dev/null
38+ curl -s https://raw.githubusercontent.com/Metropolis-nexus/Common-Files /main/etc/ssh/ssh_config.d/10-custom.conf | tee /etc/ssh/ssh_config.d/10-custom.conf > /dev/null
3939mkdir -p /etc/systemd/system/sshd.service.d/
4040chmod 755 /etc/systemd/system/sshd.service.d/
41- curl -s https://raw.githubusercontent.com/GrapheneOS/infrastructure/refs/heads /main/etc/systemd/system/sshd.service.d/override.conf | tee /etc/systemd/system/sshd.service.d/override.conf > /dev/null
41+ curl -s https://raw.githubusercontent.com/Metropolis-nexus/Common-Files /main/etc/systemd/system/sshd.service.d/override.conf | tee /etc/systemd/system/sshd.service.d/override.conf > /dev/null
4242systemctl daemon-reload
4343systemctl restart sshd
4444
@@ -77,28 +77,28 @@ proxmox-boot-tool refresh
7777# ##
7878
7979# Kernel hardening
80- curl -s https://raw.githubusercontent.com/secureblue/secureblue/live/files/system/ etc/modprobe.d/blacklist.conf | tee /etc/modprobe.d/server-blacklist.conf > /dev/null
81- curl -s https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts /main/etc/sysctl.d/99-server.conf | tee /etc/sysctl.d/99-server.conf > /dev/null
80+ curl -s https://raw.githubusercontent.com/Metropolis-nexus/Common-Files/main/ etc/modprobe.d/server- blacklist.conf | tee /etc/modprobe.d/server-blacklist.conf > /dev/null
81+ curl -s https://raw.githubusercontent.com/Metropolis-nexus/Common-Files /main/etc/sysctl.d/99-server.conf | tee /etc/sysctl.d/99-server.conf > /dev/null
8282sysctl -p
8383
8484# Rebuild initramfs
8585update-initramfs -u
8686
8787# Disable coredump
88- curl -s https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts /main/etc/security/limits.d/30-disable-coredump.conf | tee /etc/security/limits.d/30-disable-coredump.conf > /dev/null
88+ curl -s https://raw.githubusercontent.com/Metropolis-nexus/Common-Files /main/etc/security/limits.d/30-disable-coredump.conf | tee /etc/security/limits.d/30-disable-coredump.conf > /dev/null
8989mkdir -p /etc/systemd/coredump.conf.d
90- curl -s https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts /main/etc/systemd/coredump.conf.d/disable.conf | tee /etc/systemd/coredump.conf.d/disable.conf > /dev/null
90+ curl -s https://raw.githubusercontent.com/Metropolis-nexus/Common-Files /main/etc/systemd/coredump.conf.d/disable.conf | tee /etc/systemd/coredump.conf.d/disable.conf > /dev/null
9191
9292# Setup ZRAM
93- curl -s https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts /main/etc/systemd/zram-generator.conf | tee /etc/systemd/zram-generator.conf > /dev/null
93+ curl -s https://raw.githubusercontent.com/Metropolis-nexus/Common-Files /main/etc/systemd/zram-generator.conf | tee /etc/systemd/zram-generator.conf > /dev/null
9494
9595# Disable Nagging
9696sed -Ezi.bak " s/(Ext.Msg.show\(\{\s+title: gettext\('No valid sub)/void\(\{ \/\/\1/g" /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js
9797
9898systemctl restart pveproxy.service
9999
100100# Configure automatic updates
101- curl -s https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts /refs/heads/main/etc/apt/apt.conf.d/52unattended-upgrades-local | tee /etc/apt/apt.conf.d/52unattended-upgrades-local > /dev/null
101+ curl -s https://raw.githubusercontent.com/Metropolis-nexus/Common-Files /refs/heads/main/etc/apt/apt.conf.d/52unattended-upgrades-local | tee /etc/apt/apt.conf.d/52unattended-upgrades-local > /dev/null
102102
103103# Setup tuned
104104tuned-adm profile virtual-host
0 commit comments