caddy hardening #3

Merged

dennis merged 25 commits from feat/caddy-hardening into main 2026-03-14 22:06:14 +01:00

Conversation 1 Commits 25 Files changed 11 +201 -61

dennis commented 2026-03-13 14:51:36 +01:00

Owner

Copy link

closes dennis/nix-config#2

closes dennis/nix-config#2

dennis added 1 commit 2026-03-13 14:51:36 +01:00

enables some global logging options ... f3704b74b0

references: dennis/nix-config#2

dennis added 1 commit 2026-03-13 15:08:55 +01:00

tries to fix caddyfile 7ea2d488da

dennis added 1 commit 2026-03-13 15:10:12 +01:00

Revert "tries to fix caddyfile" ... 2834afcf90

This reverts commit 7ea2d488da.

dennis added 1 commit 2026-03-13 19:08:00 +01:00

tries to fix logging declaration for caddy 51f665142f

dennis added 1 commit 2026-03-13 19:15:28 +01:00

adapts caddy config further 217dae0545

dennis added 1 commit 2026-03-13 19:19:45 +01:00

tries to fix output file b0fc5c12f2

dennis added 1 commit 2026-03-13 19:39:39 +01:00

uses one log file for all subomains f5316a16cf

dennis added 1 commit 2026-03-13 19:49:14 +01:00

includes http in logs 4216a5913e

dennis added 1 commit 2026-03-13 20:49:23 +01:00

block certain Ips 7a423febf2

dennis added 1 commit 2026-03-13 21:15:45 +01:00

configures nftables correctly 3bfc9c3113

dennis added 1 commit 2026-03-13 21:45:31 +01:00

extracts firewall a02ee5b6e2

dennis added 1 commit 2026-03-13 22:05:04 +01:00

adds wireguard tools 96a507569a

dennis added 1 commit 2026-03-13 22:40:26 +01:00

sets up wireguard peers 756028460a

dennis added 1 commit 2026-03-13 22:41:56 +01:00

fixes secret d9a2b07e23

dennis added 1 commit 2026-03-13 23:07:03 +01:00

changes port for wireguard 38bda93d5d

dennis added 1 commit 2026-03-13 23:12:01 +01:00

adapts cidr range 3aaeee8ab9

dennis added 2 commits 2026-03-13 23:29:38 +01:00

fixes wireguard 6f5434eb54

merges fdfbf233ea

dennis added 3 commits 2026-03-13 23:36:25 +01:00

fixes wireguard config 13767291f7

only allows ssh traffic from wireguard 9fd8dc83e5

Merge branch 'feat/caddy-hardening' of ssh://git.dnsc.io/dennis/nix-config into feat/caddy-hardening 14c8363986

dennis added 1 commit 2026-03-13 23:44:39 +01:00

do not open firewall for ssh automatically fa2ab615af

dennis commented 2026-03-13 23:57:44 +01:00

Author

Owner

Copy link

Todo

• only allow wireguard traffic for forgejo or move to netcup or disable ssh for forgejo
• remove openFirewall from ssh config

after that i should be good.

Todo - [ ] only allow wireguard traffic for forgejo or move to netcup or disable ssh for forgejo - [ ] remove openFirewall from ssh config after that i should be good.

dennis added 2 commits 2026-03-14 22:04:18 +01:00

switches to openssh because of forgejo 8c6181c569

only allows https for git 6e78e302f9

dennis added 1 commit 2026-03-14 22:05:25 +01:00

disables ssh for forgejo 056f6b50b3

dennis merged commit 4fbc84786e into main 2026-03-14 22:06:14 +01:00

dennis deleted branch feat/caddy-hardening 2026-03-14 22:06:15 +01:00

dennis referenced this pull request from a commit 2026-03-14 22:06:15 +01:00

Merge pull request 'caddy hardening' (#3) from feat/caddy-hardening into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

dennis/nix-config!3

No description provided.