+1 for more restrictions on DNS API tokens. Ways to mitigate the riscs:
$ apt install unattended-upgrades
# /etc/apt/apt.conf.d/99unattended-upgrades-custom
Unattended-Upgrade::Sender "Root at servername.domain.tld <[email protected]>";
Unattended-Upgrade::Mail "[email protected]";
Unattended-Upgrade::MailReport "on-change";
Unattended-Upgrade::Automatic-Reboot "true";
Unattended-Upgrade::Automatic-Reboot-Time "05:00";
$ sudo systemctl edit apt-daily.timer
# Opens a new file /etc/systemd/system/apt-daily.timer.d/override.conf, paste this content:
[Timer]
# Reset the system calendar config first
Set a new calendar timer with a 60 minute threshold
03:00
RandomizedDelaySec=30m
$ sudo systemctl edit apt-daily-upgrade.timer
# Opens a new file /etc/systemd/system/apt-daily-upgrade.timer.d/override.conf, paste this content:
[Timer]
# Reset the system calendar config first
Set a new calendar timer with a 60 minute threshold
04:00
RandomizedDelaySec=30m
.. and are auto-updated. When a reboot is needed after an update, it gets rebooted automatically. - people who used to move on to a larger house stay because of the increased costs
- older houses are broken down and are replaced by newer ones … but due to building regulations fewer are build at the same place
- due to stagnation in outflow and decreased number of houses the waiting time for getting a “social house” is increased by a ridiculous amount. In Eindhoven it is more than 10 years - in theory. But due to rules about preferred placement it’s often way more.