|
|
d8a963d0f9
|
deploy: add firewalld direct-rule flood-mitigation script (per-IP hashlimit on the IRC ports); gitignore the pinned bin/ artifact
|
2026-08-12 18:03:07 +00:00 |
|
|
|
be97089dfa
|
deploy: use firewalld direct-rule for the per-IP flood mitigation (this box runs firewalld — a raw iptables rule would be flushed on reload); replaces the plain-iptables draft
|
2026-08-12 18:02:45 +00:00 |
|
|
|
df160801c8
|
deploy: iptables hashlimit flood-mitigation script (per-source-IP rate limit on the IRC client ports; policy-accept, loopback-exempt, idempotent add/del) — kernel-layer defense-in-depth, not applied automatically
|
2026-08-12 17:55:46 +00:00 |
|
|
|
2aaa5ac091
|
deploy: persistent systemd unit running a pinned release binary with Restart=on-failure + boot enable, plus a liveness timer that restarts the daemon if a register round-trip stops answering
|
2026-08-12 16:01:58 +00:00 |
|
