Unify legacy data path /etc/xdp-blocker → /etc/xdp-defense
All config/data paths now use /etc/xdp-defense/ consistently, eliminating the legacy xdp-blocker directory reference. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -11,7 +11,7 @@ general:
|
||||
|
||||
blocker:
|
||||
enabled: true
|
||||
config_dir: /etc/xdp-blocker # existing data path (blocklist, countries, whitelist)
|
||||
config_dir: /etc/xdp-defense # blocklist, countries, whitelist data
|
||||
|
||||
rate_limits:
|
||||
default_pps: 2000 # packets per second threshold
|
||||
|
||||
@@ -15,7 +15,7 @@ RestartSec=5
|
||||
|
||||
# Security hardening
|
||||
ProtectSystem=strict
|
||||
ReadWritePaths=/var/lib/xdp-defense /etc/xdp-defense /etc/xdp-blocker /sys/fs/bpf /tmp
|
||||
ReadWritePaths=/var/lib/xdp-defense /etc/xdp-defense /sys/fs/bpf /tmp
|
||||
ProtectHome=true
|
||||
NoNewPrivileges=false
|
||||
CapabilityBoundingSet=CAP_NET_ADMIN CAP_BPF CAP_SYS_ADMIN CAP_PERFMON
|
||||
|
||||
Reference in New Issue
Block a user