diff --git a/web/app/docs/post-install/security/page.tsx b/web/app/docs/post-install/security/page.tsx index ae36b1e..9e4b42d 100644 --- a/web/app/docs/post-install/security/page.tsx +++ b/web/app/docs/post-install/security/page.tsx @@ -71,13 +71,13 @@ systemctl stop rpcbind `} /> -
- Lynis is a comprehensive security auditing tool that analyzes your system, detects vulnerabilities, and provides recommendations for improving security. + Lynis is a comprehensive security auditing tool that analyzes your system, detects vulnerabilities, and provides + recommendations for improving security.
How it works: Lynis scans the system and evaluates various security parameters, including: @@ -89,11 +89,26 @@ systemctl stop rpcbind
This adjustment automates the following command:
++ Installation method: ProxMenux now installs the latest version of Lynis directly from the + official GitHub repository to ensure you have the most up-to-date security scanning capabilities. +
+This adjustment automates the following process:
To run a system security audit, execute:
@@ -103,46 +118,61 @@ apt-get -y install lynis lynis audit system `} /> +To check the installed Lynis version:
++ Fail2Ban enhances security by monitoring login attempts and banning malicious IPs that attempt unauthorized + access. +
++ How it works: Fail2Ban analyzes logs, detects repeated authentication failures, and + automatically bans the source IP address to prevent further attacks. +
+- Fail2Ban enhances security by monitoring login attempts and banning malicious IPs that attempt unauthorized access. -
-- How it works: Fail2Ban analyzes logs, detects repeated authentication failures, and automatically bans the source IP address to prevent further attacks. -
-Fail2Ban is configured with the following security policies:
+/var/log/auth.log
for SSH and /var/log/daemon.log
{" "}
+ for Proxmox
+ - Fail2Ban is configured with the following security policies: -
-/var/log/auth.log
for SSH and /var/log/daemon.log
for ProxmoxThis adjustment automates the following command:
-Check active Fail2Ban jails:
-You can manually unban an IP if needed:
-You can manually unban an IP if needed:
+Fail2Ban automatically protect your Proxmox VE and SSH access, reducing the risk of brute-force attacks.
+ /> ++ Fail2Ban automatically protect your Proxmox VE and SSH access, reducing the risk of brute-force attacks. +