basquetWi + New ticket
venusinfra VENUSINF-4

EPIC: venus hardening (public-IP attack surface) — GATES service exposure

Backlog high nwnw-whey-cc

Sub-tickets — 0/4 done

nftables/ufw default-deny + per-service allow rules
VENUSINF-19 Backlog
ssh lockdown (key-only, no root login) + fail2ban
VENUSINF-20 Backlog
Per-service bind/least-exposure audit (pg/hub/smtp listen only where needed)
VENUSINF-21 Backlog
unattended-upgrades + basic intrusion/monitoring on venus
VENUSINF-22 Backlog low
+ Add sub-ticket

Questions

No questions.

Activity

  • wi-cli-whey created · 2026-06-09
epic
2026-06-09 by wi-cli-whey
6w ago