V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

.preseed/preseed.yaml

@@ -372,16 +372,21 @@ ntp:
 # Dropbear settings
 ################################################################################################################################
 dropbear:
-  boot: true
-  dhcp: true
-  firewall: false
-  port: 42137
+  boot: true                   # Dropbear initramfs integration.
+  dhcp: true                   # Whether the '/etc/initramfs-tools/conf.d/ip' file should be configured statically or via DHCP.
+  firewall: false              # Yet not implemented. MUST be "false".
+                               # Additional ultra hardening of the dropbear initramfs environment via firewall.
+                               # The "bastion_ipv4" MUST be provided.
+  port: 42137                  # SSH Port dropbear initramfs should listen.
 
 ################################################################################################################################
 # SSH settings
 ################################################################################################################################
 ssh:
-  allow_hardening: true
+  allow_hardening: true        # For additional hardening of SSH connections via TCP wrapper: '/etc/hosts.allow'.
+                               # If "allow_policies" = "true", at least one 'bastion_ipv4' MUST be provided.
+                               # One or multiple Domains could be provided as well via 'allow_domain'.
+
   allow_domain:
     - vpn00.x448.eu
   allow_ipv4:
@@ -413,10 +418,9 @@ user:
     - 2a03:4000:53:f:abcd:9494:0:2
   allow_domain:                # Provide Bastion / Jump-Server / static VPN-Exit-Nodes Domains.
     - vpn00.x448.eu
-  dropbear_boot: true          # Dropbear initramfs integration.
-  dropbear_dhcp: true          # Whether the '/etc/initramfs-tools/conf.d/ip' file should be configured statically or via DHCP.
-  dropbear_fw: true            # Additional ultra hardening of the dropbear initramfs environment via firewall.
-                               # The "bastion_ipv4" MUST be provided.
+
+
+
   ssh_port: 42137              # SSH Port. In case "dropbear_boot" = "true" the same SSH Port will be used.
   ssh_rootca: "/.preseed/ssh_root_ca.pub"