- apt: check if squeeze-lts is being automatically processed.
- loginrecords: deploy module.
- ssh:
- - access restrictions.
+ - access restrictions:
- denyhosts, but we don't want to log IPs.
- using shorewall: http://www.debian-administration.org/articles/250#comment_16
- alowed users / groups.
- backup:
- - turn on $doluks, $dolvm, $dombr and $dobios on backupninja::sys for servers and physical machines.
+ - support for $dombr and $dobios on backupninja::sys for servers and physical machines.
- sync-backups support for rsyncing from kvms / snapshots.
- virtual: migrate away from vservers.
- kvm-manager or libvirt.
- http://andrewbunday.co.uk/2012/12/04/masterless-puppet-wrapper/
- http://semicomplete.com/presentations/puppet-at-loggly/puppet-at-loggly.pdf.html
- https://github.com/jordansissel/puppet-examples/tree/master/masterless
+- wordpress:
+ - cronjob: switch to site user
### Fixes
+- sshd/backup:
+ - ecdsa priority: alternatives:
+ - unsupport ecdsa in the server
+ - export ecdsa pubkeys
+ - manage client's /root/.ssh/config: `HostKeyAlgorithms ssh-rsa`
+ - force option via rsync/rdiff handlers
+ - enable ecdsa key
- general:
- rollback of commits about charset.
- switch to conf.d: