summaryrefslogtreecommitdiff
path: root/docs/installation_guide/binary.md
diff options
context:
space:
mode:
authorLibravatar kernelmethod <17100608+kernelmethod@users.noreply.github.com>2022-11-30 17:09:26 -0500
committerLibravatar GitHub <noreply@github.com>2022-11-30 23:09:26 +0100
commit1652633d93aa578e4d902a94c94a48f08ae78c3a (patch)
treef36dff38efdcd30b75c02d5dcf35042005b62141 /docs/installation_guide/binary.md
parent[bugfix] Don't call `strings.ToLower()` on usernames when selecting account b... (diff)
downloadgotosocial-1652633d93aa578e4d902a94c94a48f08ae78c3a.tar.xz
[docs] Add AppArmor profile for Debian and Ubuntu installations (#1183)
* Enable the 'admonitions' Markdown extension for Mkdocs. The admonitions extension to Python-Markdown allows you to include rST-style "admonitions" to Markdown documents, for instance, !!! note Here's an important note to keep in mind! In general, the current documentation uses bold text to try to achieve the same effect, which is a bit harder to notice and makes it difficult to differentiate between "here's something useful to know" versus "here there be dragons". * Add AppArmor profile and documentation for LSM-related sandboxing This commit adds an AppArmor profile for gotosocial in examples/apparmor/gotosocial. This will (hopefully) serve as a helpful security mitigation for people are planning on deploying GTS on a Debian-family Linux distribution. I've also updates the documentation to include some information about deploying GTS with either AppArmor or SELinux (moving the documentation for the former out of the "binary installation guide" docs).
Diffstat (limited to 'docs/installation_guide/binary.md')
-rw-r--r--docs/installation_guide/binary.md4
1 files changed, 0 insertions, 4 deletions
diff --git a/docs/installation_guide/binary.md b/docs/installation_guide/binary.md
index 269f0d01b..d570a3974 100644
--- a/docs/installation_guide/binary.md
+++ b/docs/installation_guide/binary.md
@@ -141,7 +141,3 @@ sudo systemctl enable --now gotosocial.service
If you want to run other webservers on port 443 or want to add an additional layer of security you might want to use [nginx](./nginx.md), [Caddy](./caddy.md) or [Apache httpd](./apache-httpd.md) as reverse proxy
-## 8. SELinux (optional)
-
-If SELinux is available on your system, you can optionally install [SELinux policy](https://github.com/lzap/gotosocial-selinux) to further improve security.
-