cd5640ebd2
- Move ci-test.sh and setup.sh to scripts/ - Trim docs/src/zig-cli.md to current structure - Replace hardcoded secrets with placeholders in configs - Update .gitignore to block .env*, secrets/, keys, build artifacts - Slim README.md to reflect current CLI/TUI split - Add cleanup trap to ci-test.sh - Ensure no secrets are committed
44 lines
716 B
Text
44 lines
716 B
Text
# Secure Redis Configuration for Homelab
|
|
|
|
# Network security
|
|
bind 0.0.0.0
|
|
protected-mode yes
|
|
port 6379
|
|
|
|
# Authentication
|
|
requirepass your-redis-password
|
|
|
|
# Security settings
|
|
rename-command FLUSHDB ""
|
|
rename-command FLUSHALL ""
|
|
rename-command KEYS ""
|
|
rename-command CONFIG "CONFIG_b835c3f8a5d2e7f1"
|
|
rename-command SHUTDOWN "SHUTDOWN_b835c3f8a5d2e7f1"
|
|
rename-command DEBUG ""
|
|
|
|
# Memory management
|
|
maxmemory 256mb
|
|
maxmemory-policy allkeys-lru
|
|
|
|
# Persistence
|
|
save 900 1
|
|
save 300 10
|
|
save 60 10000
|
|
|
|
# Logging
|
|
loglevel notice
|
|
logfile ""
|
|
|
|
# Client limits
|
|
timeout 300
|
|
tcp-keepalive 60
|
|
tcp-backlog 511
|
|
|
|
# Performance
|
|
databases 16
|
|
always-show-logo no
|
|
|
|
# Security
|
|
supervised no
|
|
pidfile /var/run/redis/redis-server.pid
|
|
dir /data
|