Source: stratum-security
Section: admin
Priority: optional
Maintainer: Stratum Project <stratum@skraba.net>
Build-Depends: debhelper-compat (= 13), golang-any
Standards-Version: 4.7.2
Homepage: https://www.skraba.net/stratum/start
Rules-Requires-Root: no

Package: stratum-security
Architecture: amd64 arm64
Depends: ${misc:Depends}, stratum-core (>= 0.48), fail2ban, python3-systemd,
 nftables, iproute2
Description: Stratum module: fail2ban, SSH and system hardening
 Stratum is a functional layer for Debian.
 .
 This module manages fail2ban: the type of computer (workstation, server,
 hypervisor, vm-guest - each with sensible defaults), ban time, failures
 before a ban, longer bans for repeat offenders, the protected services
 (only installed ones: SSH, nginx, Apache, Dovecot, Postfix, recidive), a
 whitelist, banned addresses (ban / unban) and a short view of important
 events (SSH logins and failures, bans, sudo, Docker).
 .
 Optional SSH and system hardening (off by default): SSH only with keys,
 root only with a key, login limits, network and kernel sysctl settings.
 Protection against locking yourself out: open SSH connections are put on
 the whitelist, risky changes are refused unless confirmed, and SSH
 changes are undone automatically unless confirmed within 120 seconds.
 Manage it from the stratum menu or with "stratum security".
