Viyurz/vps
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Compare commits

base: Viyurz:9c7ad280f9f2c712e45534b3079eae57255c4c28
Branches Tags
Viyurz:main
..
compare: Viyurz:bc1e2d3a2e191327d0f8f1d9af824283d3a53542
Branches Tags
Viyurz:main

No commits in common. "9c7ad280f9f2c712e45534b3079eae57255c4c28" and "bc1e2d3a2e191327d0f8f1d9af824283d3a53542" have entirely different histories.
9c7ad280f9 ... bc1e2d3a2e

3 changed files with 7 additions and 7 deletions
Show stats Expand all files Collapse all files

4
monitoring.py
View file

@ -9,9 +9,9 @@ import time
# CPU usage threshold in percent # CPU usage threshold in percent
CPU_THRESHOLD = 50 CPU_THRESHOLD = 35
# Memory usage threshold in GB # Memory usage threshold in GB
MEMORY_THRESHOLD = 3.25 MEMORY_THRESHOLD = 2.75
# Disk usage threshold in GB # Disk usage threshold in GB
DISK_LOCAL_THRESHOLD = 25 DISK_LOCAL_THRESHOLD = 25
DISK_SMB_THRESHOLD = 120 DISK_SMB_THRESHOLD = 120

2
roles/mailserver/templates/docker-compose.yaml
View file

@ -1,7 +1,7 @@
services: services:
mailserver: mailserver:
container_name: mailserver container_name: mailserver
image: docker.io/stalwartlabs/mail-server:v0.10.0 image: docker.io/stalwartlabs/mail-server:v0.9.3
restart: always restart: always
user: "{{ users['mailserver'] }}:{{ users['mailserver'] }}" user: "{{ users['mailserver'] }}:{{ users['mailserver'] }}"
ports: ports:

8
roles/nftables/templates/nftables.conf
View file

@ -41,15 +41,15 @@ table inet filter {
# Rate limiting # Rate limiting
meta nfproto ipv4 meter ratelimit4 \ meta nfproto ipv4 meter ratelimit4 \
{ ip saddr limit rate over 75/second burst 15 packets } \ { ip saddr limit rate over 75/second burst 15 packets } \
add @blackhole_ipv4 { ip saddr } counter add @blackhole_ipv4 { ip saddr }
meta nfproto ipv6 meter ratelimit6 \ meta nfproto ipv6 meter ratelimit6 \
{ ip6 saddr limit rate over 75/second burst 15 packets } \ { ip6 saddr limit rate over 75/second burst 15 packets } \
add @blackhole_ipv6 { ip6 saddr } counter add @blackhole_ipv6 { ip6 saddr }
# Max concurrent connections # Max concurrent connections
meta nfproto ipv4 meter connlimit4 \ meta nfproto ipv4 meter connlimit4 \
{ ip saddr ct count over 100 } add @blackhole_ipv4 { ip saddr } counter { ip saddr ct count over 100 } add @blackhole_ipv4 { ip saddr }
meta nfproto ipv6 meter connlimit6 \ meta nfproto ipv6 meter connlimit6 \
{ ip6 saddr ct count over 100 } add @blackhole_ipv6 { ip6 saddr } counter { ip6 saddr ct count over 100 } add @blackhole_ipv6 { ip6 saddr }
# Allow ICMP # Allow ICMP
meta l4proto icmp accept meta l4proto icmp accept