{"action":"opened","issue":{"url":"https://api.github.com/repos/uProxy/uproxy/issues/2620","repository_url":"https://api.github.com/repos/uProxy/uproxy","labels_url":"https://api.github.com/repos/uProxy/uproxy/issues/2620/labels{/name}","comments_url":"https://api.github.com/repos/uProxy/uproxy/issues/2620/comments","events_url":"https://api.github.com/repos/uProxy/uproxy/issues/2620/events","html_url":"https://github.com/uProxy/uproxy/issues/2620","id":168191279,"number":2620,"title":"server security checklist","user":{"login":"jab","id":64992,"avatar_url":"https://avatars.githubusercontent.com/u/64992?v=3","gravatar_id":"","url":"https://api.github.com/users/jab","html_url":"https://github.com/jab","followers_url":"https://api.github.com/users/jab/followers","following_url":"https://api.github.com/users/jab/following{/other_user}","gists_url":"https://api.github.com/users/jab/gists{/gist_id}","starred_url":"https://api.github.com/users/jab/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jab/subscriptions","organizations_url":"https://api.github.com/users/jab/orgs","repos_url":"https://api.github.com/users/jab/repos","events_url":"https://api.github.com/users/jab/events{/privacy}","received_events_url":"https://api.github.com/users/jab/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-07-28T20:40:27Z","updated_at":"2016-07-28T20:40:27Z","closed_at":null,"body":"For any servers we run exposed to the Internet (e.g. Quiver):\r\n\r\n- Automate security updates\r\n- Disable password-based SSH login\r\n- Set up fail2ban\r\n- Drop packets originating from unrecognized networks, e.g. anything that isn't Google (so we can SSH in) and for Quiver, anything that doesn't come from the CDN whose domain is being fronted\r\n- Make sure anyone whose DigitalOcean/AWS/etc account has access to the server has 2FA set up (or at least a strong password)\r\n\r\nPlease add anything I missed"}}
{"actor":{"display_login":"jab"}}