syonfox / alpine-droplet Goto Github PK

alpine script to check if any pakcages have an cve here
https://security.alpinelinux.org/

I vote for a no bs aproce.

Back to first priciples. minimal . minimiza atac surface.
maximise agility
finde the balance between usability and priotatise win win security features that are inharent in the design of the product.

Fore example having scalable clusters is usefull but i dont want to go 4 configs deep to change the port.. and which 4 were they.

The point is by creating simper systems we can avoid alot of boiler platyes. so is running containers good. maybe for deploying other peoples software but docure should be treeted as a hostile environment

KISS

port 433 and 4222 only

web sockets/ https and ssh

buy what about dns and ntp?
https://wiki.alpinelinux.org/wiki/DNSCrypt-Proxy

IN theory for cloudflare we could use mTLS and block all non cloudflair orgin servers,

Our server would then encrypt the trapic with our secure Layer and OSL and then With standards TLS

at whitch point it leaves this safe garden and all data is public. so dont worry about this to much for now...

(todo look into rotainting AES256 over TLS Multi Round somthing somthing i think is the consensis)

libsodium
https://pkgs.alpinelinux.org/package/edge/main/x86/libsodium-dev

First draft is here:

https://psgr.sgol.pub/views/overview_system?name=alpinedroplet1