G Derber

/etc/gitconfig

This may not be implemented anytime soon. There are options I frequently use that aren't available in the module. References: - https://docs.ansible.com/ansible/latest/collections/community/general/ssh_config_module.html

1. End to end encryption 2. Zero-access encrypted data A. This will more likely be limited access. #291 4. Secure email for people without GPG or S/MIME 5. Allow and...

References: - https://serverfault.com/questions/1099716/postfix-couldnt-stop-sasl-login-authentication-failed-attack-in-mail-logs - https://superuser.com/questions/576751/example-of-fail2ban-configuration-to-ban-servers-spamming-my-postfix-server

Configure: - [x] Spamassassin Milter #63 - [x] OpenDKIM milter[2] #462 - [ ] OpenDMARC milter[2] #429 - [ ] SPF Verification[2] - [x] ClamAV #64 - [ ] #463...

Used for authentication for DMZ postfix server. References: - https://wiki.debian.org/PostfixAndSASL - https://www.postfix.org/SASL_README.html#server_cyrus - https://www.cyrusimap.org/sasl/sasl/quickstart.html - http://www.linux-admins.net/2020/03/postfix-as-sasl-authenticated-tls.html - https://medium.com/@kaivanov/postfix-as-a-sasl-authenticated-tls-enabled-relay-59bcfb40b3d4 - https://www.lunanode.com/guides/postfix_smtp_secure - https://www.postfix.org/SMTPD_ACCESS_README.html

Depends on #348 Requirements: - [ ] Btrfs scrub - [ ] smartctl? - [x] acmeca certs - [ ] ownca host certs - [ ] ownca user certs -...

packages: - btrfs-tools - snapper - snapper-gui?

References: - https://wiki.archlinux.org/title/GnuPG#Shared_access_with_pcscd - https://emil.lerch.org/pkcs-11-openpgp-yubikeys/solokeys-and-windows-amis/ - https://github.com/drduh/YubiKey-Guide - https://www.reddit.com/r/yubikey/comments/1299gwm/should_fido_pgp_and_piv_pins_be_different_how/