Skip to content

Instantly share code, notes, and snippets.

View f-bn's full-sized avatar

Florian Bobin f-bn

20 followers · 17 following
View GitHub Profile
@ageis
ageis / systemd_service_hardening.md
Last active January 6, 2026 11:51
Options for hardening systemd service units

security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict
@grenade
grenade / 01-generate-ed25519-ssh-key.sh
Last active January 12, 2026 09:58
generate ed25519 ssh and gpg/pgp keys and set file permissions for ssh keys and config
#!/bin/bash
mkdir -p ~/.ssh
# generate new personal ed25519 ssh keys
ssh-keygen -o -a 100 -t ed25519 -f ~/.ssh/id_ed25519 -C "rob thijssen <rthijssen@gmail.com>"
ssh-keygen -o -a 100 -t ed25519 -f ~/.ssh/id_robtn -C "rob thijssen <rob@rob.tn>"
# generate new host cert authority (host_ca) ed25519 ssh key
# used for signing host keys and creating host certs
@MohamedAlaa
MohamedAlaa / tmux-cheatsheet.markdown
Last active January 22, 2026 13:03
tmux shortcuts & cheatsheet

tmux shortcuts & cheatsheet

start new:

tmux

start new with session name:

tmux new -s myname