# Managed by node-hardening skill

# Increase backlog for busy systems
-b 8192

# Identity files
-w /etc/passwd -p wa -k identity
-w /etc/group -p wa -k identity
-w /etc/shadow -p wa -k identity

# SSH config
-w /etc/ssh/sshd_config -p wa -k sshd

# Privilege escalation
-w /etc/sudoers -p wa -k sudo
-w /etc/sudoers.d/ -p wa -k sudo

# Systemd unit changes
-w /etc/systemd/system/ -p wa -k systemd

# Network config
-w /etc/ufw/ -p wa -k ufw

# End of rules
-e 1