System overview
Minimal control surface for services that affect the public attack surface.
HTTP 80
-
Auto renewal
-
ThinLinc
-
Certificates
Services
Changes apply immediately and persist across reboot.
Automatic certificate renewal
ON opens port 80 for ACME, renews certificates due within 2 days immediately, then schedules the next exact H-2 run. OFF removes the listener and firewall opening.
ThinLinc
Controls tlwebaccess, tlwebadm, vsmagent and vsmserver together. OFF must remove ports 300, 904, 1010 and 9000.