Ghost
released this
2026-07-03 05:55:47 +00:00
| 10 commits to main since this release
Added
tune command. sudo ./src/deploy.sh tune applies the host performance profile (kernel sysctl +
FD limits scaled to RAM/cores) on demand, confirming first — separate from a full install / harden.status gets its own Performance section. Performance no longer sits under Security; it's a
dedicated numbered section showing the active profile (connection backlog, conntrack, congestion
control, swappiness).doc/PERFORMANCE-TUNING.md — a dedicated performance doc (migrated + expanded from
SYSTEM-HARDENING.md): the host sysctl profile, Caddy web.performance knobs, immutable cache headers,
and how to apply/skip it (--all default, tune, --no-tune, or harden).
Changed
- Clarified everywhere (README,
--help, docs) that --all applies hardening and tuning by default
— opt out per stage with --no-harden / --no-tune.
Downloads