Compare commits
No commits in common. "9c7ad280f9f2c712e45534b3079eae57255c4c28" and "bc1e2d3a2e191327d0f8f1d9af824283d3a53542" have entirely different histories.
9c7ad280f9
...
bc1e2d3a2e
3 changed files with 7 additions and 7 deletions
|
@ -9,9 +9,9 @@ import time
|
|||
|
||||
|
||||
# CPU usage threshold in percent
|
||||
CPU_THRESHOLD = 50
|
||||
CPU_THRESHOLD = 35
|
||||
# Memory usage threshold in GB
|
||||
MEMORY_THRESHOLD = 3.25
|
||||
MEMORY_THRESHOLD = 2.75
|
||||
# Disk usage threshold in GB
|
||||
DISK_LOCAL_THRESHOLD = 25
|
||||
DISK_SMB_THRESHOLD = 120
|
||||
|
|
|
@ -1,7 +1,7 @@
|
|||
services:
|
||||
mailserver:
|
||||
container_name: mailserver
|
||||
image: docker.io/stalwartlabs/mail-server:v0.10.0
|
||||
image: docker.io/stalwartlabs/mail-server:v0.9.3
|
||||
restart: always
|
||||
user: "{{ users['mailserver'] }}:{{ users['mailserver'] }}"
|
||||
ports:
|
||||
|
|
|
@ -41,15 +41,15 @@ table inet filter {
|
|||
# Rate limiting
|
||||
meta nfproto ipv4 meter ratelimit4 \
|
||||
{ ip saddr limit rate over 75/second burst 15 packets } \
|
||||
add @blackhole_ipv4 { ip saddr } counter
|
||||
add @blackhole_ipv4 { ip saddr }
|
||||
meta nfproto ipv6 meter ratelimit6 \
|
||||
{ ip6 saddr limit rate over 75/second burst 15 packets } \
|
||||
add @blackhole_ipv6 { ip6 saddr } counter
|
||||
add @blackhole_ipv6 { ip6 saddr }
|
||||
# Max concurrent connections
|
||||
meta nfproto ipv4 meter connlimit4 \
|
||||
{ ip saddr ct count over 100 } add @blackhole_ipv4 { ip saddr } counter
|
||||
{ ip saddr ct count over 100 } add @blackhole_ipv4 { ip saddr }
|
||||
meta nfproto ipv6 meter connlimit6 \
|
||||
{ ip6 saddr ct count over 100 } add @blackhole_ipv6 { ip6 saddr } counter
|
||||
{ ip6 saddr ct count over 100 } add @blackhole_ipv6 { ip6 saddr }
|
||||
|
||||
# Allow ICMP
|
||||
meta l4proto icmp accept
|
||||
|
|
Loading…
Reference in a new issue