Skip to content

Harden VPS servers against CVE-2026-98432 - #241

Open
michael wants to merge 1 commit into
mainfrom
vps-hardening
Open

michael wants to merge 1 commit into
mainfrom
vps-hardening

Conversation

@michael

@michael michael commented Nov 2, 2026

Copy link
Copy Markdown
Owner

Every deploy now turns off multipath TCP (restarting Caddy onto plain TCP listeners), drops IPv4 TCP packets with IP options through an nft table that a systemd unit restores on boot, keeps unattended security updates on, and warns when the server needs a reboot for a new kernel.

Every deploy now turns off multipath TCP (restarting Caddy onto plain
TCP listeners), drops IPv4 TCP packets with IP options through an nft
table that a systemd unit restores on boot, keeps unattended security
updates on, and warns when the server needs a reboot for a new kernel.
@vercel

vercel Bot commented Nov 2, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
editable-website Ready Ready Preview Nov 2, 2026 8:09pm UTC

This branch was successfully deployed

1 active deployment
Preview — 1fdc0ad5 Deployed Nov 2, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant