linux-security/config.env at main · davidwhittington/linux-security · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
#!/usr/bin/env bash
# config.env — linux-security core configuration
#
# Edit this file before running any scripts.
# bootstrap.sh and all scripts discover it automatically when placed at
# the repo root or /etc/linux-security/config.env.
#
# Web-server-specific settings (Apache, TLS, PHP, etc.) live in config.web.env.
# You can also export CONFIG_FILE=/path/to/your/config.env to point
# scripts at a file in your private submodule.

# =============================================================================
# SSH
# =============================================================================

# Port SSH listens on. Change this if you use a non-standard port.
# All scripts (UFW rules, fail2ban jail) read from this one variable.
SSH_PORT=22

# =============================================================================
# Admin user  (core/02-setup-admin-user.sh)
# =============================================================================

# Username to promote to sudo admin. Must already exist on the server.
ADMIN_USER="youruser"

# =============================================================================
# Email and SMTP  (core/03-monthly-updates-setup.sh, web/02-log-monitoring-setup.sh)
# =============================================================================

# Where to send reports and alerts.
ADMIN_EMAIL="you@example.com"

# From address for outgoing server emails.
MAIL_FROM="server@yourdomain.com"

# SMTP relay for msmtp. Use your mail provider's outbound SMTP settings.
# Common: smtp.gmail.com:587, smtp.mailgun.org:587, smtp.postmarkapp.com:587
SMTP_HOST="smtp.gmail.com"
SMTP_PORT=587

# SMTP credentials. Leave empty to attempt unauthenticated relay (rarely works).
SMTP_USER=""
SMTP_PASS=""