HorlogeSkynet 81fd48eaf2 feat: publishes postgresql (cluster) service overrides ...

Note : on distributions packaging each PostgreSQL version as `postgresql-${version}.service`
       systemd units (and not `postgresql@${version}-${cluster}.service`), an additional install
       step will be required.
       For instance :

       ln -s /usr/local/share/systemd-hardene.d/collection/postgresql@.service.d /usr/local/lib/systemd/system/postgresql-17.service.d

2026-08-01 16:15:29 +02:00

..

apache2.service.d

feat: publishes apache2 (httpd) service overrides

2026-05-23 15:00:48 +02:00

avahi-daemon.service.d

fix(avahi-daemon): allows chroot as required by service

2026-05-06 22:54:21 +02:00

bluetooth.service.d

sec(bluetooth): enables PrivateIPC

2026-05-09 21:17:32 +02:00

caddy.service.d

sec(caddy): enables PrivateIPC

2026-05-09 21:44:11 +02:00

dnsmasq.service.d

style(dnsmasq): re-orders socket address families

2026-06-04 22:55:50 +02:00

dovecot.service.d

Initial commit

2026-04-13 22:20:42 +02:00

freeradius.service.d

feat: publishes freeradius service overrides

2026-04-23 20:50:01 +02:00

gitea.service.d

sec(gitea): restricts service allowed system calls

2026-05-08 14:59:51 +02:00

isso.service.d

sec!(isso): enables MemoryDenyWriteExecute

2026-05-08 18:47:48 +02:00

iwd.service.d

sec: enforces PrivateMounts for most of services

2026-04-18 16:25:19 +02:00

mumble-server.service.d

sec!(mumble-server): tightens overrides according to Debian 13 packaging

2026-05-30 15:58:07 +02:00

NetworkManager.service.d

style(NetworkManager): prefers yes as boolean value

2026-05-27 23:14:24 +02:00

nginx.service.d

sec(nginx): enables PrivateIPC

2026-05-09 21:24:38 +02:00

nitter.service.d

sec(nitter): enables PrivateIPC

2026-05-09 21:44:21 +02:00

opendkim.service.d

sec(opendkim): blocks memfd_create syscall

2026-06-10 23:11:29 +02:00

opendmarc.service.d

sec(opendmarc): blocks memfd_create syscall

2026-06-10 23:11:37 +02:00

org.cups.cupsd.service.d

Initial commit

2026-04-13 22:20:42 +02:00

postfix@.service.d

sec(postfix): blocks memfd_create syscall

2026-06-10 23:11:47 +02:00

postgresql@.service.d

feat: publishes postgresql (cluster) service overrides

2026-08-01 16:15:29 +02:00

postgrey.service.d

sec(postgrey): enables PrivateIPC

2026-05-09 21:28:53 +02:00

redis.service.d

sec(redis): enables PrivateIPC

2026-05-09 21:21:15 +02:00

rsyslog.service.d

sec(rsyslog): enables PrivateIPC

2026-05-09 21:15:51 +02:00

forgejo.service.d

Initial commit

2026-04-13 22:20:42 +02:00

gogs.service.d

Initial commit

2026-04-13 22:20:42 +02:00

httpd.service.d

feat: publishes apache2 (httpd) service overrides

2026-05-23 15:00:48 +02:00

postfix.service.d

feat(postfix): adds non-instance systemd service support

2026-05-08 18:04:58 +02:00