Features: - PHP 8.4 support (from 8.3) - WordPress 7.0 (auto-update via WP-CLI) - Modern TLS 1.3 cipher suites (2026 best practices) - Fail2Ban security integration (5 jails: SSH, Nginx, WordPress, recidive) - Auto-update cron job for WordPress (weekly Minor updates) - Debian 14 Forky support (testing) - Ubuntu 25.04 support - Python 3.12 in GitHub Actions Security: - Fail2Ban with SSH brute force protection (24h ban) - WordPress wp-login.php protection (2h ban) - Nginx bot scanner protection - Recidive jail for repeat offenders (1 week ban) - Modern TLS ciphers (AEAD only) - HSTS 2 years for preload Documentation: - docs/autoupdate.md - WordPress auto-update guide - docs/fail2ban.md - Fail2Ban configuration guide - docs/troubleshooting.md - Updated with php_version variable Breaking changes: - PHP 8.4 is now the default (requires Ubuntu 20.04+ or Debian 11+)
25 lines
406 B
YAML
Executable File
25 lines
406 B
YAML
Executable File
---
|
|
extends: default
|
|
|
|
rules:
|
|
line-length:
|
|
max: 120
|
|
level: warning
|
|
indentation:
|
|
spaces: 2
|
|
truthy:
|
|
allowed-values: ['true', 'false', 'on', 'off', 'yes', 'no']
|
|
comments:
|
|
min-spaces-from-content: 1
|
|
braces:
|
|
max-spaces-inside: 1
|
|
max-spaces-inside-empty: 0
|
|
brackets:
|
|
max-spaces-inside: 1
|
|
max-spaces-inside-empty: 0
|
|
|
|
ignore: |
|
|
.github/
|
|
docker/
|
|
*/node_modules/
|