From 1bff32e01fd101e5df8100a1c5e5aa943958fe7c Mon Sep 17 00:00:00 2001 From: "us.nadeko.net" Date: Wed, 14 Aug 2024 15:58:53 -0400 Subject: [PATCH] Delete useless directories --- i2pd/i2pd.conf | 284 ---------------------------- i2pd/i2pd.conf.dpkg-dist | 285 ----------------------------- i2pd/tunnels.conf | 33 ---- i2pd/tunnels.conf.d/README | 4 - i2pd/tunnels.conf.d/zzls.i2p.conf | 5 - sysctl.d/30-wireguard-forward.conf | 1 - sysctl.d/99-swappiness.conf | 1 - sysctl.d/99-sysctl.conf | 1 - sysctl.d/README.sysctl | 13 -- sysctl.d/internettweaks.conf | 40 ---- 10 files changed, 667 deletions(-) delete mode 100644 i2pd/i2pd.conf delete mode 100644 i2pd/i2pd.conf.dpkg-dist delete mode 100644 i2pd/tunnels.conf delete mode 100644 i2pd/tunnels.conf.d/README delete mode 100644 i2pd/tunnels.conf.d/zzls.i2p.conf delete mode 100644 sysctl.d/30-wireguard-forward.conf delete mode 100644 sysctl.d/99-swappiness.conf delete mode 120000 sysctl.d/99-sysctl.conf delete mode 100644 sysctl.d/README.sysctl delete mode 100644 sysctl.d/internettweaks.conf diff --git a/i2pd/i2pd.conf b/i2pd/i2pd.conf deleted file mode 100644 index f3e3682..0000000 --- a/i2pd/i2pd.conf +++ /dev/null @@ -1,284 +0,0 @@ -## Configuration file for a typical i2pd user -## See https://i2pd.readthedocs.io/en/latest/user-guide/configuration/ -## for more options you can use in this file. - -## Lines that begin with "## " try to explain what's going on. Lines -## that begin with just "#" are disabled commands: you can enable them -## by removing the "#" symbol. - -## Tunnels config file -## Default: ~/.i2pd/tunnels.conf or /var/lib/i2pd/tunnels.conf -# tunconf = /var/lib/i2pd/tunnels.conf - -## Tunnels config files path -## Use that path to store separated tunnels in different config files. -## Default: ~/.i2pd/tunnels.d or /var/lib/i2pd/tunnels.d -# tunnelsdir = /var/lib/i2pd/tunnels.d - -## Path to certificates used for verifying .su3, families -## Default: ~/.i2pd/certificates or /var/lib/i2pd/certificates -# certsdir = /var/lib/i2pd/certificates - -## Where to write pidfile (default: i2pd.pid, not used in Windows) -# pidfile = /run/i2pd.pid - -## Logging configuration section -## By default logs go to stdout with level 'info' and higher -## For Windows OS by default logs go to file with level 'warn' and higher -## -## Logs destination (valid values: stdout, file, syslog) -## * stdout - print log entries to stdout -## * file - log entries to a file -## * syslog - use syslog, see man 3 syslog -# log = file -## Path to logfile (default - autodetect) -# logfile = /var/log/i2pd/i2pd.log -## Log messages above this level (debug, info, *warn, error, none) -## If you set it to none, logging will be disabled -loglevel = none -## Write full CLF-formatted date and time to log (default: write only time) -# logclftime = true - -## Daemon mode. Router will go to background after start. Ignored on Windows -# daemon = true - -## Specify a family, router belongs to (default - none) -# family = - -## Network interface to bind to -## Updates address4/6 options if they are not set -# ifname = -## You can specify different interfaces for IPv4 and IPv6 -# ifname4 = -# ifname6 = - -## Local address to bind transport sockets to -## Overrides host option if: -## For ipv4: if ipv4 = true and nat = false -## For ipv6: if 'host' is not set or ipv4 = true -# address4 = -# address6 = - -## External IPv4 or IPv6 address to listen for connections -## By default i2pd sets IP automatically -## Sets published NTCP2v4/SSUv4 address to 'host' value if nat = true -## Sets published NTCP2v6/SSUv6 address to 'host' value if ipv4 = false -# host = 1.2.3.4 - -## Port to listen for connections -## By default i2pd picks random port. You MUST pick a random number too, -## don't just uncomment this -port = 12999 - -## Enable communication through ipv4 -ipv4 = true -## Enable communication through ipv6 -ipv6 = false - -## Enable SSU transport -ssu = false - -## Bandwidth configuration -## L limit bandwidth to 32KBs/sec, O - to 256KBs/sec, P - to 2048KBs/sec, -## X - unlimited -## Default is L (regular node) and X if floodfill mode enabled. If you want to -## share more bandwidth without floodfill mode, uncomment that line and adjust -## value to your possibilities -bandwidth = O -## Max % of bandwidth limit for transit. 0-100. 100 by default -share = 20 - -## Router will not accept transit tunnels, disabling transit traffic completely -## (default = false) -# notransit = true - -## Router will be floodfill -## Note: that mode uses much more network connections and CPU! -# floodfill = true - -[ntcp2] -## Enable NTCP2 transport (default = true) -# enabled = true -## Publish address in RouterInfo (default = true) -# published = true -## Port for incoming connections (default is global port option value) -# port = 4567 - -[ssu2] -## Enable SSU2 transport -# enabled = true -## Publish address in RouterInfo -# published = true -## Port for incoming connections (default is global port option value or port + 1 if SSU is enabled) -# port = 4567 - -[http] -## Web Console settings -## Uncomment and set to 'false' to disable Web Console -# enabled = true -## Address and port service will listen on -address = 127.0.0.1 -port = 7070 -## Path to web console, default "/" -# webroot = / -## Uncomment following lines to enable Web Console authentication -## You should not use Web Console via public networks without additional encryption. -## HTTP authentication is not encryption layer! -# auth = true -# user = i2pd -# pass = changeme -## Select webconsole language -## Currently supported english (default), afrikaans, armenian, chinese, czech, french, -## german, italian, polish, portuguese, russian, spanish, turkish, turkmen, ukrainian -## and uzbek languages -# lang = english - -[httpproxy] -## Uncomment and set to 'false' to disable HTTP Proxy -# enabled = true -## Address and port service will listen on -address = 127.0.0.1 -port = 4444 -## Optional keys file for proxy local destination -# keys = http-proxy-keys.dat -## Enable address helper for adding .i2p domains with "jump URLs" (default: true) -## You should disable this feature if your i2pd HTTP Proxy is public, -## because anyone could spoof the short domain via addresshelper and forward other users to phishing links -# addresshelper = true -## Address of a proxy server inside I2P, which is used to visit regular Internet -# outproxy = http://false.i2p -## httpproxy section also accepts I2CP parameters, like "inbound.length" etc. - -[socksproxy] -## Uncomment and set to 'false' to disable SOCKS Proxy -# enabled = true -## Address and port service will listen on -address = 127.0.0.1 -port = 4447 -## Optional keys file for proxy local destination -# keys = socks-proxy-keys.dat -## Socks outproxy. Example below is set to use Tor for all connections except i2p -## Uncomment and set to 'true' to enable using of SOCKS outproxy -# outproxy.enabled = false -## Address and port of outproxy -# outproxy = 127.0.0.1 -# outproxyport = 9050 -## socksproxy section also accepts I2CP parameters, like "inbound.length" etc. - -[sam] -## Comment or set to 'false' to disable SAM Bridge -enabled = true -## Address and ports service will listen on -# address = 127.0.0.1 -# port = 7656 -# portudp = 7655 - -[bob] -## Uncomment and set to 'true' to enable BOB command channel -# enabled = false -## Address and port service will listen on -# address = 127.0.0.1 -# port = 2827 - -[i2cp] -## Uncomment and set to 'true' to enable I2CP protocol -# enabled = false -## Address and port service will listen on -# address = 127.0.0.1 -# port = 7654 - -[i2pcontrol] -## Uncomment and set to 'true' to enable I2PControl protocol -# enabled = false -## Address and port service will listen on -# address = 127.0.0.1 -# port = 7650 -## Authentication password. "itoopie" by default -# password = itoopie - -[precomputation] -## Enable or disable elgamal precomputation table -## By default, enabled on i386 hosts -# elgamal = true - -[upnp] -## Enable or disable UPnP: automatic port forwarding (enabled by default in WINDOWS, ANDROID) -# enabled = false -## Name i2pd appears in UPnP forwardings list (default = I2Pd) -# name = I2Pd - -[meshnets] -## Enable connectivity over the Yggdrasil network -# yggdrasil = false -## You can bind address from your Yggdrasil subnet 300::/64 -## The address must first be added to the network interface -# yggaddress = - -[reseed] -## Options for bootstrapping into I2P network, aka reseeding -## Enable or disable reseed data verification. -verify = true -## URLs to request reseed data from, separated by comma -## Default: "mainline" I2P Network reseeds -# urls = https://reseed.i2p-projekt.de/,https://i2p.mooo.com/netDb/,https://netdb.i2p2.no/ -## Reseed URLs through the Yggdrasil, separated by comma -# yggurls = http://[324:9de3:fea4:f6ac::ace]:7070/ -## Path to local reseed data file (.su3) for manual reseeding -# file = /path/to/i2pseeds.su3 -## or HTTPS URL to reseed from -# file = https://legit-website.com/i2pseeds.su3 -## Path to local ZIP file or HTTPS URL to reseed from -# zipfile = /path/to/netDb.zip -## If you run i2pd behind a proxy server, set proxy server for reseeding here -## Should be http://address:port or socks://address:port -# proxy = http://127.0.0.1:8118 -## Minimum number of known routers, below which i2pd triggers reseeding. 25 by default -# threshold = 25 - -[addressbook] -## AddressBook subscription URL for initial setup -## Default: reg.i2p at "mainline" I2P Network -# defaulturl = http://shx5vqsw7usdaunyzr2qmes2fq37oumybpudrd4jjj4e4vk4uusa.b32.i2p/hosts.txt -## Optional subscriptions URLs, separated by comma -# subscriptions = http://reg.i2p/hosts.txt,http://identiguy.i2p/hosts.txt,http://stats.i2p/cgi-bin/newhosts.txt,http://rus.i2p/hosts.txt - -[limits] -## Maximum active transit sessions (default: 5000) -## This value is doubled if floodfill mode is enabled! -# transittunnels = 5000 -## Limit number of open file descriptors (0 - use system limit) -# openfiles = 0 -## Maximum size of corefile in Kb (0 - use system limit) -# coresize = 0 - -[trust] -## Enable explicit trust options. false by default -# enabled = true -## Make direct I2P connections only to routers in specified Family. -# family = MyFamily -## Make direct I2P connections only to routers specified here. Comma separated list of base64 identities. -# routers = -## Should we hide our router from other routers? false by default -# hidden = true - -[exploratory] -## Exploratory tunnels settings with default values -# inbound.length = 2 -# inbound.quantity = 3 -# outbound.length = 2 -# outbound.quantity = 3 - -[persist] -## Save peer profiles on disk (default: true) -# profiles = true -## Save full addresses on disk (default: true) -# addressbook = true - -[cpuext] -## Use CPU AES-NI instructions set when work with cryptography when available (default: true) -# aesni = true -## Use CPU AVX instructions set when work with cryptography when available (default: true) -# avx = true -## Force usage of CPU instructions set, even if they not found -## DO NOT TOUCH that option if you really don't know what are you doing! -# force = false diff --git a/i2pd/i2pd.conf.dpkg-dist b/i2pd/i2pd.conf.dpkg-dist deleted file mode 100644 index be4a671..0000000 --- a/i2pd/i2pd.conf.dpkg-dist +++ /dev/null @@ -1,285 +0,0 @@ -## Configuration file for a typical i2pd user -## See https://i2pd.readthedocs.io/en/latest/user-guide/configuration/ -## for more options you can use in this file. - -## Lines that begin with "## " try to explain what's going on. Lines -## that begin with just "#" are disabled commands: you can enable them -## by removing the "#" symbol. - -## Tunnels config file -## Default: ~/.i2pd/tunnels.conf or /var/lib/i2pd/tunnels.conf -# tunconf = /var/lib/i2pd/tunnels.conf - -## Tunnels config files path -## Use that path to store separated tunnels in different config files. -## Default: ~/.i2pd/tunnels.d or /var/lib/i2pd/tunnels.d -# tunnelsdir = /var/lib/i2pd/tunnels.d - -## Path to certificates used for verifying .su3, families -## Default: ~/.i2pd/certificates or /var/lib/i2pd/certificates -# certsdir = /var/lib/i2pd/certificates - -## Where to write pidfile (default: /run/i2pd.pid, not used in Windows) -# pidfile = /run/i2pd.pid - -## Logging configuration section -## By default logs go to stdout with level 'info' and higher -## For Windows OS by default logs go to file with level 'warn' and higher -## -## Logs destination (valid values: stdout, file, syslog) -## * stdout - print log entries to stdout -## * file - log entries to a file -## * syslog - use syslog, see man 3 syslog -# log = file -## Path to logfile (default: autodetect) -# logfile = /var/log/i2pd/i2pd.log -## Log messages above this level (debug, info, *warn, error, critical, none) -## If you set it to none, logging will be disabled -# loglevel = warn -## Write full CLF-formatted date and time to log (default: write only time) -# logclftime = true - -## Daemon mode. Router will go to background after start. Ignored on Windows -## (default: true) -# daemon = true - -## Specify a family, router belongs to (default - none) -# family = - -## Network interface to bind to -## Updates address4/6 options if they are not set -# ifname = -## You can specify different interfaces for IPv4 and IPv6 -# ifname4 = -# ifname6 = - -## Local address to bind transport sockets to -## Overrides host option if: -## For ipv4: if ipv4 = true and nat = false -## For ipv6: if 'host' is not set or ipv4 = true -# address4 = -# address6 = - -## External IPv4 or IPv6 address to listen for connections -## By default i2pd sets IP automatically -## Sets published NTCP2v4/SSUv4 address to 'host' value if nat = true -## Sets published NTCP2v6/SSUv6 address to 'host' value if ipv4 = false -# host = 1.2.3.4 - -## Port to listen for connections -## By default i2pd picks random port. You MUST pick a random number too, -## don't just uncomment this -# port = 4567 - -## Enable communication through ipv4 (default: true) -ipv4 = true -## Enable communication through ipv6 (default: false) -ipv6 = false - -## Bandwidth configuration -## L limit bandwidth to 32 KB/sec, O - to 256 KB/sec, P - to 2048 KB/sec, -## X - unlimited -## Default is L (regular node) and X if floodfill mode enabled. -## If you want to share more bandwidth without floodfill mode, uncomment -## that line and adjust value to your possibilities. Value can be set to -## integer in kilobytes, it will apply that limit and flag will be used -## from next upper limit (example: if you set 4096 flag will be X, but real -## limit will be 4096 KB/s). Same can be done when floodfill mode is used, -## but keep in mind that low values may be negatively evaluated by Java -## router algorithms. -# bandwidth = L -## Max % of bandwidth limit for transit. 0-100 (default: 100) -# share = 100 - -## Router will not accept transit tunnels, disabling transit traffic completely -## (default: false) -# notransit = true - -## Router will be floodfill (default: false) -## Note: that mode uses much more network connections and CPU! -# floodfill = true - -[ntcp2] -## Enable NTCP2 transport (default: true) -# enabled = true -## Publish address in RouterInfo (default: true) -# published = true -## Port for incoming connections (default is global port option value) -# port = 4567 - -[ssu2] -## Enable SSU2 transport (default: true) -# enabled = true -## Publish address in RouterInfo (default: true) -# published = true -## Port for incoming connections (default is global port option value) -# port = 4567 - -[http] -## Web Console settings -## Enable the Web Console (default: true) -# enabled = true -## Address and port service will listen on (default: 127.0.0.1:7070) -# address = 127.0.0.1 -# port = 7070 -## Path to web console (default: /) -# webroot = / -## Enable Web Console authentication (default: false) -## You should not use Web Console via public networks without additional encryption. -## HTTP authentication is not encryption layer! -# auth = true -# user = i2pd -# pass = changeme -## Select webconsole language -## Currently supported english (default), afrikaans, armenian, chinese, czech, french, -## german, italian, polish, portuguese, russian, spanish, turkish, turkmen, ukrainian -## and uzbek languages -# lang = english - -[httpproxy] -## Enable the HTTP proxy (default: true) -# enabled = true -## Address and port service will listen on (default: 127.0.0.1:4444) -# address = 127.0.0.1 -# port = 4444 -## Optional keys file for proxy local destination (default: http-proxy-keys.dat) -# keys = http-proxy-keys.dat -## Enable address helper for adding .i2p domains with "jump URLs" (default: true) -## You should disable this feature if your i2pd HTTP Proxy is public, -## because anyone could spoof the short domain via addresshelper and forward other users to phishing links -# addresshelper = true -## Address of a proxy server inside I2P, which is used to visit regular Internet -# outproxy = http://false.i2p -## httpproxy section also accepts I2CP parameters, like "inbound.length" etc. - -[socksproxy] -## Enable the SOCKS proxy (default: true) -# enabled = true -## Address and port service will listen on (default: 127.0.0.1:4447) -# address = 127.0.0.1 -# port = 4447 -## Optional keys file for proxy local destination (default: socks-proxy-keys.dat) -# keys = socks-proxy-keys.dat -## Socks outproxy. Example below is set to use Tor for all connections except i2p -## Enable using of SOCKS outproxy (works only with SOCKS4, default: false) -# outproxy.enabled = false -## Address and port of outproxy -# outproxy = 127.0.0.1 -# outproxyport = 9050 -## socksproxy section also accepts I2CP parameters, like "inbound.length" etc. - -[sam] -## Enable the SAM bridge (default: true) -# enabled = false -## Address and ports service will listen on (default: 127.0.0.1:7656, udp: 7655) -# address = 127.0.0.1 -# port = 7656 -# portudp = 7655 - -[bob] -## Enable the BOB command channel (default: false) -# enabled = false -## Address and port service will listen on (default: 127.0.0.1:2827) -# address = 127.0.0.1 -# port = 2827 - -[i2cp] -## Enable the I2CP protocol (default: false) -# enabled = false -## Address and port service will listen on (default: 127.0.0.1:7654) -# address = 127.0.0.1 -# port = 7654 - -[i2pcontrol] -## Enable the I2PControl protocol (default: false) -# enabled = false -## Address and port service will listen on (default: 127.0.0.1:7650) -# address = 127.0.0.1 -# port = 7650 -## Authentication password (default: itoopie) -# password = itoopie - -[precomputation] -## Enable or disable elgamal precomputation table -## By default, enabled on i386 hosts -# elgamal = true - -[upnp] -## Enable or disable UPnP: automatic port forwarding (enabled by default in WINDOWS, ANDROID) -# enabled = false -## Name i2pd appears in UPnP forwardings list (default: I2Pd) -# name = I2Pd - -[meshnets] -## Enable connectivity over the Yggdrasil network (default: false) -# yggdrasil = false -## You can bind address from your Yggdrasil subnet 300::/64 -## The address must first be added to the network interface -# yggaddress = - -[reseed] -## Options for bootstrapping into I2P network, aka reseeding -## Enable reseed data verification (default: true) -verify = true -## URLs to request reseed data from, separated by comma -## Default: "mainline" I2P Network reseeds -# urls = https://reseed.i2p-projekt.de/,https://i2p.mooo.com/netDb/,https://netdb.i2p2.no/ -## Reseed URLs through the Yggdrasil, separated by comma -# yggurls = http://[324:71e:281a:9ed3::ace]:7070/ -## Path to local reseed data file (.su3) for manual reseeding -# file = /path/to/i2pseeds.su3 -## or HTTPS URL to reseed from -# file = https://legit-website.com/i2pseeds.su3 -## Path to local ZIP file or HTTPS URL to reseed from -# zipfile = /path/to/netDb.zip -## If you run i2pd behind a proxy server, set proxy server for reseeding here -## Should be http://address:port or socks://address:port -# proxy = http://127.0.0.1:8118 -## Minimum number of known routers, below which i2pd triggers reseeding (default: 25) -# threshold = 25 - -[addressbook] -## AddressBook subscription URL for initial setup -## Default: reg.i2p at "mainline" I2P Network -# defaulturl = http://shx5vqsw7usdaunyzr2qmes2fq37oumybpudrd4jjj4e4vk4uusa.b32.i2p/hosts.txt -## Optional subscriptions URLs, separated by comma -# subscriptions = http://reg.i2p/hosts.txt,http://identiguy.i2p/hosts.txt,http://stats.i2p/cgi-bin/newhosts.txt,http://rus.i2p/hosts.txt - -[limits] -## Maximum active transit sessions (default: 5000) -## This value is doubled if floodfill mode is enabled! -# transittunnels = 5000 -## Limit number of open file descriptors (0 - use system limit) -# openfiles = 0 -## Maximum size of corefile in Kb (0 - use system limit) -# coresize = 0 - -[trust] -## Enable explicit trust options. (default: false) -# enabled = true -## Make direct I2P connections only to routers in specified Family. -# family = MyFamily -## Make direct I2P connections only to routers specified here. Comma separated list of base64 identities. -# routers = -## Should we hide our router from other routers? (default: false) -# hidden = true - -[exploratory] -## Exploratory tunnels settings with default values -# inbound.length = 2 -# inbound.quantity = 3 -# outbound.length = 2 -# outbound.quantity = 3 - -[persist] -## Save peer profiles on disk (default: true) -# profiles = true -## Save full addresses on disk (default: true) -# addressbook = true - -[cpuext] -## Use CPU AES-NI instructions set when work with cryptography when available (default: true) -# aesni = true -## Force usage of CPU instructions set, even if they not found (default: false) -## DO NOT TOUCH that option if you really don't know what are you doing! -# force = false diff --git a/i2pd/tunnels.conf b/i2pd/tunnels.conf deleted file mode 100644 index 55723c4..0000000 --- a/i2pd/tunnels.conf +++ /dev/null @@ -1,33 +0,0 @@ -[IRC-ILITA] -type = client -address = 127.0.0.1 -port = 6668 -destination = irc.ilita.i2p -destinationport = 6667 -keys = irc-keys.dat - -#[IRC-IRC2P] -#type = client -#address = 127.0.0.1 -#port = 6669 -#destination = irc.postman.i2p -#destinationport = 6667 -#keys = irc-keys.dat - -#[SMTP] -#type = client -#address = 127.0.0.1 -#port = 7659 -#destination = smtp.postman.i2p -#destinationport = 25 -#keys = smtp-keys.dat - -#[POP3] -#type = client -#address = 127.0.0.1 -#port = 7660 -#destination = pop.postman.i2p -#destinationport = 110 -#keys = pop3-keys.dat - -# see more examples at https://i2pd.readthedocs.io/en/latest/user-guide/tunnels/ diff --git a/i2pd/tunnels.conf.d/README b/i2pd/tunnels.conf.d/README deleted file mode 100644 index 7b07c4b..0000000 --- a/i2pd/tunnels.conf.d/README +++ /dev/null @@ -1,4 +0,0 @@ -# In that directory you can store separated config files for every tunnel. -# Please read documentation for more info. -# -# You can find examples in /usr/share/doc/i2pd/tunnels.d directory diff --git a/i2pd/tunnels.conf.d/zzls.i2p.conf b/i2pd/tunnels.conf.d/zzls.i2p.conf deleted file mode 100644 index 14260d0..0000000 --- a/i2pd/tunnels.conf.d/zzls.i2p.conf +++ /dev/null @@ -1,5 +0,0 @@ -[zzls] -type = http -host = 127.0.0.1 -port = 30001 -keys = zzls.i2p diff --git a/sysctl.d/30-wireguard-forward.conf b/sysctl.d/30-wireguard-forward.conf deleted file mode 100644 index 119d730..0000000 --- a/sysctl.d/30-wireguard-forward.conf +++ /dev/null @@ -1 +0,0 @@ -net.ipv4.ip_forward=1 diff --git a/sysctl.d/99-swappiness.conf b/sysctl.d/99-swappiness.conf deleted file mode 100644 index 5a37698..0000000 --- a/sysctl.d/99-swappiness.conf +++ /dev/null @@ -1 +0,0 @@ -vm.swappiness=4 diff --git a/sysctl.d/99-sysctl.conf b/sysctl.d/99-sysctl.conf deleted file mode 120000 index 2b0036b..0000000 --- a/sysctl.d/99-sysctl.conf +++ /dev/null @@ -1 +0,0 @@ -../sysctl.conf \ No newline at end of file diff --git a/sysctl.d/README.sysctl b/sysctl.d/README.sysctl deleted file mode 100644 index 13970ff..0000000 --- a/sysctl.d/README.sysctl +++ /dev/null @@ -1,13 +0,0 @@ -Kernel system variables configuration files - -Files found under the /etc/sysctl.d directory that end with .conf are -parsed within sysctl(8) at boot time. If you want to set kernel variables -you can either edit /etc/sysctl.conf or make a new file. - -The filename isn't important, but don't make it a package name as it may clash -with something the package builder needs later. It must end with .conf though. - -My personal preference would be for local system settings to go into -/etc/sysctl.d/local.conf but as long as you follow the rules for the names -of the file, anything will work. See sysctl.conf(8) man page for details -of the format. diff --git a/sysctl.d/internettweaks.conf b/sysctl.d/internettweaks.conf deleted file mode 100644 index 68e41f5..0000000 --- a/sysctl.d/internettweaks.conf +++ /dev/null @@ -1,40 +0,0 @@ -#TCP Tweaks -net.ipv4.tcp_tw_reuse = 1 -net.ipv4.tcp_fastopn = 3 -net.ipv4.tcp_fin_timeout = 10 - -# disable tcp timestamps to avoid leaking some system information -# https://www.whonix.org/wiki/Disable_TCP_and_ICMP_Timestamps -net.ipv4.tcp_timestamps=0 - -#TCP BBR Congestion Control Algoritm -net.core.default_qdisc = cake -net.ipv4.tcp_congestion_control = bbr - -#Ignore ICMP Ping requests -net.ipv4.icmp_echo_ignore_all = 1 -net.ipv6.icmp.echo_ignore_all = 1 - -#Increase the memory dedicated to the network interfaces -net.core.rmem_default = 1048576 -net.core.rmem_max = 16777216 -net.core.wmem_default = 1048576 -net.core.wmem_max = 16777216 -net.core.optmem_max = 65536 -net.ipv4.tcp_rmem = 4096 1048576 2097152 -net.ipv4.tcp_wmem = 4096 65536 16777216 - -net.ipv4.udp_rmem_min = 8192 -net.ipv4.udp_wmem_min = 8192 - -# increase aslr effectiveness for mmap -# https://lwn.net/Articles/667790 -vm.mmap_rnd_bits=32 -vm.mmap_rnd_compat_bits=16 - -#SYN Flood Protection - -net.ipv4.tcp_max_syn_backlog = 1024 -net.ipv4.tcp_syn_retries = 6 -net.ipv4.tcp_synack_retries = 3 -net.ipv4.tcp_syncookies = 1