// Modules

Modules 11

Building blocks for every app – choose them when you create a guest or add them later, in containers and VMs alike.

Choose when you create

Tick modules in the dialog (“advanced”) or in the generator on every app page.

Add any time

update --add-modules <name> in the guest – containers and VMs alike.

Kept up to date

Active modules run with every update. Removing one keeps its data.

Automatic security updates

unattended-upgrades

Installs Debian security updates automatically every day (without a reboot)

LXCVM

Automatic update (nightly)

auto-update

Runs the full update every night at 02:00 – Debian packages, app, modules and iac, without a reboot. Log: journalctl -u iac-auto-update

LXCVM preselected

Backup (restic)

backup

Daily backup with restic to SFTP, S3, a REST server or a local path – /etc, /root, /var/lib, the app's data and database dumps. Target: backup_repository in /etc/iac/settings.env

LXCVM

CrowdSec

crowdsec

CrowdSec from Debian: detects attacks in the logs (SSH from the journal, nginx, Apache) and blocks the addresses with nftables (own tables). Shares signals with the CrowdSec community and uses its blocklist; private networks are never blocked. Manage with cscli

LXCVM