Ullrich Schäfer 8eb3481831 Harden SSH: disable passwords, forwarding, add keepalive ... Add SSH hardening to user_data for future server rebuilds: - PasswordAuthentication no (key-only access) - X11Forwarding no (headless server) - AllowTcpForwarding no (no SSH tunnels needed) - AllowAgentForwarding no (no agent forwarding needed) - MaxAuthTries 3 (reduced from 6) - ClientAliveInterval 300 + ClientAliveCountMax 2 (clean up dead sessions) Already applied manually to the existing server via /etc/ssh/sshd_config.d/99-hardening.conf. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-03-29 22:32:30 +02:00
..
grafana	Fix error-rate-high alert firing on no data	2026-03-29 22:20:14 +02:00
loki	Pass Grafana env vars to Caddy container, fix Loki compactor config	2026-03-27 13:53:56 +01:00
postgres	Add PostgreSQL datasource to Grafana with read-only user	2026-03-27 20:07:27 +01:00
prometheus	Add service health monitoring: postgres, node, cAdvisor exporters + dashboard	2026-03-27 18:50:42 +01:00
scripts	Add infrastructure: Terraform, Docker Compose, BRouter, CD pipeline (#2)	2026-03-22 13:32:01 +01:00
terraform	Harden SSH: disable passwords, forwarding, add keepalive	2026-03-29 22:32:30 +02:00
.env.example	Add infrastructure: Terraform, Docker Compose, BRouter, CD pipeline (#2)	2026-03-22 13:32:01 +01:00
Caddyfile	Allow Planner to connect to Journal in CSP	2026-03-27 21:34:41 +01:00
docker-compose.yml	Add SMTP configuration to Grafana for alert emails	2026-03-27 20:27:45 +01:00
secrets.app.env	SOPS+age secrets, split CD workflows, GitHub OAuth for Grafana	2026-03-27 17:28:04 +01:00
secrets.infra.env	Add GRAFANA_SERVICE_TOKEN to encrypted infra secrets	2026-03-29 19:49:29 +02:00