DietPi-Docs icon indicating copy to clipboard operation
DietPi-Docs copied to clipboard

Chapter for "hardening the system" or "maintaining the system"

Open StephanStS opened this issue 4 years ago • 2 comments

Add items about

StephanStS avatar Nov 22 '20 21:11 StephanStS

Another addition, although not sure if this fits best into general security/hardening chapter or better into webserver/HTTPS section:

  • Creating a self-signed TLS certificate, with proper SAN to allow encrypted and authenticated local network access via local IP(s) and/or hostname(s).
  • Add a self-signed TLS certificate to the OS' Trusted Root Certification Authorities store.
  • Related to Bitwarden docs, where this is required: https://dietpi.com/phpbb/viewtopic.php?p=28903#p28903

I'll add an example with the Bitwarden_RS docs port about how to do that on Windows 10. Would be great to add those for Android (multiple versions?), Linux and macOS as well, e.g. via content tabs. Once we decided or have a proper central chapter/section for this, we can copy the Bitwarden example and link it from wherever it might be relevant.

MichaIng avatar Nov 27 '20 14:11 MichaIng

I could handle macOS, but because of my old computer my system is 2 versions out of date. Probably not much difference though.

nonnorm avatar Jan 27 '21 22:01 nonnorm