Viyurz/vps
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Compare commits

base: Viyurz:bc1e2d3a2e191327d0f8f1d9af824283d3a53542
Branches Tags
Viyurz:main
...
compare: Viyurz:9c7ad280f9f2c712e45534b3079eae57255c4c28
Branches Tags
Viyurz:main

3 commits
bc1e2d3a2e ... 9c7ad280f9

Author SHA1 Message Date
Viyurz
9c7ad280f9
[nftables] Add blackholes counters 2024-09-21 12:29:48 +02:00
Viyurz
e6fce28ee0
[mailserver] Update to v0.10.0 2024-09-21 12:27:40 +02:00
Viyurz
f08cbac83f
[monitoring] Update thresholds 2024-09-21 12:27:20 +02:00
3 changed files with 7 additions and 7 deletions
Show stats Expand all files Collapse all files

4
monitoring.py
View file

@ -9,9 +9,9 @@ import time
# CPU usage threshold in percent
CPU_THRESHOLD = 35
CPU_THRESHOLD = 50
# Memory usage threshold in GB
MEMORY_THRESHOLD = 2.75
MEMORY_THRESHOLD = 3.25
# Disk usage threshold in GB
DISK_LOCAL_THRESHOLD = 25
DISK_SMB_THRESHOLD = 120

2
roles/mailserver/templates/docker-compose.yaml
View file

@ -1,7 +1,7 @@
services:
mailserver:
container_name: mailserver
image: docker.io/stalwartlabs/mail-server:v0.9.3
image: docker.io/stalwartlabs/mail-server:v0.10.0
restart: always
user: "{{ users['mailserver'] }}:{{ users['mailserver'] }}"
ports:

8
roles/nftables/templates/nftables.conf
View file

@ -41,15 +41,15 @@ table inet filter {
# Rate limiting
meta nfproto ipv4 meter ratelimit4 \
{ ip saddr limit rate over 75/second burst 15 packets } \
add @blackhole_ipv4 { ip saddr }
add @blackhole_ipv4 { ip saddr } counter
meta nfproto ipv6 meter ratelimit6 \
{ ip6 saddr limit rate over 75/second burst 15 packets } \
add @blackhole_ipv6 { ip6 saddr }
add @blackhole_ipv6 { ip6 saddr } counter
# Max concurrent connections
meta nfproto ipv4 meter connlimit4 \
{ ip saddr ct count over 100 } add @blackhole_ipv4 { ip saddr }
{ ip saddr ct count over 100 } add @blackhole_ipv4 { ip saddr } counter
meta nfproto ipv6 meter connlimit6 \
{ ip6 saddr ct count over 100 } add @blackhole_ipv6 { ip6 saddr }
{ ip6 saddr ct count over 100 } add @blackhole_ipv6 { ip6 saddr } counter
# Allow ICMP
meta l4proto icmp accept