V8.13.290.2025.10.26

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

config/hooks/live/0001_initramfs_modules.chroot

@@ -105,9 +105,9 @@ sha512_generic
 xts
 
 ### cryptsetup -----------------------------------------------------------------------------------------------------------------
-dm_mod
 dm_crypt
 dm_integrity
+dm_mod
 dm_verity
 
 ### Entropy --------------------------------------------------------------------------------------------------------------------
@@ -117,6 +117,11 @@ rng_core
 ### ESP/FAT/UEFI ---------------------------------------------------------------------------------------------------------------
 exfat
 fat
+nls_ascii
+nls_cp437
+nls_iso8859-1
+nls_iso8859-15
+nls_utf8
 vfat
 
 ### ext4 -----------------------------------------------------------------------------------------------------------------------
@@ -144,14 +149,14 @@ nf_nat
 nf_reject_ipv4
 nf_reject_ipv6
 nf_tables
+nfnetlink
+nfnetlink_log
 nft_ct
 nft_limit
 nft_log
 nft_masq
 nft_nat
 nft_reject_inet
-nfnetlink
-nfnetlink_log
 
 ### NVMe -----------------------------------------------------------------------------------------------------------------------
 nvme
@@ -165,24 +170,24 @@ raid456
 raid6_pq
 
 ### SCSI/SATA ------------------------------------------------------------------------------------------------------------------
-sd_mod
-sr_mod
-sg
 ahci
-libahci
 ata_generic
+libahci
 libata
-scsi_mod
 scsi_dh_alua
+scsi_mod
+sd_mod
+sg
+sr_mod
 
 ### USB ------------------------------------------------------------------------------------------------------------------------
-xhci_pci
-xhci_hcd
 ehci_pci
 ohci_pci
+uas
 uhci_hcd
 usb_storage
-uas
+xhci_hcd
+xhci_pci
 
 ### Virtual --------------------------------------------------------------------------------------------------------------------
 virtio_blk

config/hooks/live/9950_hardening_fail2ban.chroot

@@ -46,6 +46,7 @@ dbpurgeage            = 384d
 #                       ff00::/8    - IPv6 multicast (not an unicast host)
 #                       ::/128      - IPv6 unspecified (all zeros; never a real peer)
 ignoreip              = 127.0.0.1/8 ::1/128 fe80::/10 ff00::/8 ::/128 IGNORE_IP_MUST_BE_SET
+usedns		            = yes
 
 [recidive]
 enabled               = true