Security Recommendations

Reporting Security Bugs

Please report all security-related bugs at rcij@riseup.net (pgp: 0x8234F8D4A624D9F4).

Securing Production Servers

• set up encrypted storage
• firewall off the Nomad network interface
• Enable HTTPS and ensure the certificates are valid
• Enable 2 factor authentication
• Enable auto logout
• Enable hoover rate limit

Follow the Maintenance page on keeping the system up to date and run the latest security patches.