mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 09:14:33 +00:00
CyberMind-FR
c9da45fa21
- Define Profile struct with packages, kernel, services, features - Implement Load() function for YAML files - Add base.yaml with common SecuBox foundation - Add unit tests for profile loading Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
36 lines
554 B
YAML
36 lines
554 B
YAML
# profiles/base.yaml
|
|
version: "2.8.0"
|
|
name: base
|
|
description: Common SecuBox foundation
|
|
|
|
packages:
|
|
required:
|
|
- secubox-core
|
|
- secubox-hub
|
|
- secubox-portal
|
|
- secubox-system
|
|
- secubox-hardening
|
|
|
|
kernel:
|
|
version: "6.6"
|
|
modules:
|
|
enable:
|
|
- wireguard
|
|
- nf_tables
|
|
- nft_nat
|
|
- nft_ct
|
|
- nft_log
|
|
blacklist: []
|
|
|
|
services:
|
|
enable:
|
|
- secubox-hub
|
|
- nginx
|
|
- nftables
|
|
|
|
sysctl:
|
|
net.ipv4.ip_forward: 1
|
|
net.ipv4.conf.all.rp_filter: 1
|
|
kernel.randomize_va_space: 2
|
|
kernel.kptr_restrict: 2
|