Viyurz/vps
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Compare commits

base: Viyurz:bc1e2d3a2e191327d0f8f1d9af824283d3a53542
Branches Tags
Viyurz:main
...
compare: Viyurz:9c7ad280f9f2c712e45534b3079eae57255c4c28
Branches Tags
Viyurz:main

3 commits
bc1e2d3a2e ... 9c7ad280f9

Author SHA1 Message Date
Viyurz
9c7ad280f9
[nftables] Add blackholes counters 2024-09-21 12:29:48 +02:00
Viyurz
e6fce28ee0
[mailserver] Update to v0.10.0 2024-09-21 12:27:40 +02:00
Viyurz
f08cbac83f
[monitoring] Update thresholds 2024-09-21 12:27:20 +02:00
3 changed files with 7 additions and 7 deletions
Show stats Expand all files Collapse all files

4
monitoring.py
View file

@ -9,9 +9,9 @@ import time
# CPU usage threshold in percent # CPU usage threshold in percent
CPU_THRESHOLD = 35 CPU_THRESHOLD = 50
# Memory usage threshold in GB # Memory usage threshold in GB
MEMORY_THRESHOLD = 2.75 MEMORY_THRESHOLD = 3.25
# Disk usage threshold in GB # Disk usage threshold in GB
DISK_LOCAL_THRESHOLD = 25 DISK_LOCAL_THRESHOLD = 25
DISK_SMB_THRESHOLD = 120 DISK_SMB_THRESHOLD = 120

2
roles/mailserver/templates/docker-compose.yaml
View file

@ -1,7 +1,7 @@
services: services:
mailserver: mailserver:
container_name: mailserver container_name: mailserver
image: docker.io/stalwartlabs/mail-server:v0.9.3 image: docker.io/stalwartlabs/mail-server:v0.10.0
restart: always restart: always
user: "{{ users['mailserver'] }}:{{ users['mailserver'] }}" user: "{{ users['mailserver'] }}:{{ users['mailserver'] }}"
ports: ports:

8
roles/nftables/templates/nftables.conf
View file

@ -41,15 +41,15 @@ table inet filter {
# Rate limiting # Rate limiting
meta nfproto ipv4 meter ratelimit4 \ meta nfproto ipv4 meter ratelimit4 \
{ ip saddr limit rate over 75/second burst 15 packets } \ { ip saddr limit rate over 75/second burst 15 packets } \
add @blackhole_ipv4 { ip saddr } add @blackhole_ipv4 { ip saddr } counter
meta nfproto ipv6 meter ratelimit6 \ meta nfproto ipv6 meter ratelimit6 \
{ ip6 saddr limit rate over 75/second burst 15 packets } \ { ip6 saddr limit rate over 75/second burst 15 packets } \
add @blackhole_ipv6 { ip6 saddr } add @blackhole_ipv6 { ip6 saddr } counter
# Max concurrent connections # Max concurrent connections
meta nfproto ipv4 meter connlimit4 \ meta nfproto ipv4 meter connlimit4 \
{ ip saddr ct count over 100 } add @blackhole_ipv4 { ip saddr } { ip saddr ct count over 100 } add @blackhole_ipv4 { ip saddr } counter
meta nfproto ipv6 meter connlimit6 \ meta nfproto ipv6 meter connlimit6 \
{ ip6 saddr ct count over 100 } add @blackhole_ipv6 { ip6 saddr } { ip6 saddr ct count over 100 } add @blackhole_ipv6 { ip6 saddr } counter
# Allow ICMP # Allow ICMP
meta l4proto icmp accept meta l4proto icmp accept