Unify legacy data path /etc/xdp-blocker → /etc/xdp-defense

All config/data paths now use /etc/xdp-defense/ consistently,
eliminating the legacy xdp-blocker directory reference.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
kaffa
2026-02-07 16:40:46 +09:00
parent 59cc6da5f9
commit 4ae4440504
9 changed files with 46 additions and 18 deletions

View File

@@ -11,7 +11,7 @@ general:
blocker:
enabled: true
config_dir: /etc/xdp-blocker # existing data path (blocklist, countries, whitelist)
config_dir: /etc/xdp-defense # blocklist, countries, whitelist data
rate_limits:
default_pps: 2000 # packets per second threshold

View File

@@ -15,7 +15,7 @@ RestartSec=5
# Security hardening
ProtectSystem=strict
ReadWritePaths=/var/lib/xdp-defense /etc/xdp-defense /etc/xdp-blocker /sys/fs/bpf /tmp
ReadWritePaths=/var/lib/xdp-defense /etc/xdp-defense /sys/fs/bpf /tmp
ProtectHome=true
NoNewPrivileges=false
CapabilityBoundingSet=CAP_NET_ADMIN CAP_BPF CAP_SYS_ADMIN CAP_PERFMON