Advanced Search
Search Results
91 total results found
SSH Hardening Reference
What This Page Covers This page walks through every directive in roles/ssh-baseline/templates/sshd_hardening.conf.j2 and explains how it lands on the target host. The deployed file is /etc/ssh/sshd_config.d/10-pbr-hardening.conf. The hardening is aligned wit...
Playbook Reference (Preflight, Verify, Teardown)
Playbooks Overview The repository contains four playbooks under playbooks/: PlaybookPurposeChanges target? preflight.ymlVerify readiness; no changesNo ssh-baseline.ymlRun preflight then apply the baseline roleYes verify.ymlPost-deployment validationNo te...
Known Limitations, Troubleshooting & Version History
Known Limitations & Accepted Risks LXC auditd compliance gap Affected hosts: pbr-graylog-kl1, pbr-thingsboard-kl1 Issue: auditd cannot run inside LXC containers. The kernel audit netlink interface is isolated from container namespaces. Forcing auditd to star...
Adjusting the Train Capacity (Manifest)
Overview Use this procedure to change the capacity for general and single-journey passengers. This affects the four main legs: Belgrave–Lakeside, Lakeside–Gembrook, Gembrook–Lakeside, and Lakeside–Belgrave. Do not manually edit these individual legs — changin...
Capacity Overview & Quick Reference
Key Concepts: Manifests and Legs In CustomLinc, a manifest represents the overall service (e.g. the 11:00 Bel-Lak-Gem / 15:05 Gem-Lak-Bel service). It appears as a green highlighted row in the Manifests view. Within each manifest, individual legs represent eac...
Strategic Partnerships Grant
Overview This guide explains how to create a booking in CustomLinc for the Strategic Partnerships Grant (SPG) program. Selecting the correct agent ensures the Source and Promotion Code are automatically assigned. Steps In CustomLinc, click Add and select Crea...
CustomLinc TOL → Queue-it Availability JSON
Overview Workflow IDT76MXW3QRGcoIBbo Webhook URLhttps://n8n.pbr.org.au/webhook/availability/tol n8n editorhttps://n8n.pbr.org.au/workflow/T76MXW3QRGcoIBbo TriggerHTTP GET/POST webhook Season2026-06-26 → 2026-07-19 (24 dates) ProductTOL (18:00 Lakeside Twilig...
Node-RED Queue Migration — msg-queue to queue-gate
Overview Purpose Migrate all level crossing Pi Node-RED flows from node-red-contrib-msg-queue to node-red-contrib-queue-gate Trigger msg-queue fails to install on rebuilt Pis — native sqlite3 dependency does not compile on modern Node.js/ARM Original flow f...
MOTOTRBO R7 — SCEPman EAP-TLS Enrolment
Overview How Motorola MOTOTRBO R7 portable radios obtain a device certificate from SCEPman (via SCEP) and authenticate to the WPA3-Enterprise Wi-Fi using EAP-TLS, validated by Aruba ClearPass. SCEPman is Azure-hosted; the radios reach it through an internal Tr...
Adjusting the Belgrave–Gembrook Return Allocation
Overview Use this procedure to change the capacity for the Belgrave – Gembrook Return allocation — the full return journey product, typically set to 56 seats. How Capacity is Structured Each leg on a Belgrave–Gembrook service has a total capacity of 176 passe...
RM Programming — Over-Wi-Fi Across Sites/Subnets
Overview Programming MOTOTRBO R7 radios and repeaters over Wi-Fi with Radio Management (RM), across sites and subnets. RM Server / Device Programmer runs on pbr-radio-kl1 (10.8.40.10), RM version 2.157.149.0. Out of the box, RM Wi-Fi programming only works whe...
Ditch the Password, Own the Passphrase
Overview Passwords are dying — not because they stopped working, but because computers got terrifyingly good at guessing them. This page explains why PBR is moving to passphrases, what the Australian Cyber Security Centre (ACSC) actually recommends, and how to...
Site: Gembrook (PBR-R-G1)
Overview Item Value Site / device Gembrook — PBR-R-G1, EdgeRouter PoE 5-port, EdgeOS 3.0.1 (Cavium MIPS64, 480 MB RAM, ~38 MB free; IPsec HW offload on) Site number / ASN 6 / 65006 WAN eth0 61.29.119.42/30 static (AAPT NBN), gateway 61.29.119.41 LAN eth2 VLANs...
Site: Cockatoo (PBR-R-CK1)
Overview Item Value Site / device Cockatoo — PBR-R-CK1, EdgeRouter PoE 5-port, EdgeOS 3.0.1 (~120 MB free; IPsec HW offload on) Site number / ASN 5 / 65005 WAN eth1 Optus 4G LTE, DHCP with fixed public IP 59.154.241.12/24; inbound IKE confirmed working LAN eth...
Site: Gembrook West (PBR-R-GW1)
Overview Item Value Site / device Gembrook West — PBR-R-GW1, EdgeRouter 12-port, EdgeOS 3.0.1 Site number / ASN 7 / 65007 WAN paths eth9 PTP 10.250.97.2/24 to Kings Rd KT1 (default via 10.250.97.1, OSPF area 0); eth8 Optus 4G LTE DHCP fixed 124.19.90.145/24 (d...
Site: Mater Christi (PBR-R-BS1)
Overview Item Value Site / device Mater Christi — PBR-R-BS1, EdgeRouter 12, EdgeOS 3.0.1 (1 GB RAM; uptime 162 d at audit; boot-image upgrade prompt pending) Site number / ASN 10 / 65010 WAN paths eth9 airFiber PTP 192.168.127.79/24 to Belgrave (default [50] v...
Site: Emerald (PBR-R-E1) — deferred, via hubs
Overview Item Value Site / device Emerald — PBR-R-E1, EdgeRouter Pro 8, EdgeOS 3.0.1 (2 GB RAM) Site number / ASN 3 / 65003 (reserved) Decision 26 Oct 2026 — no Cato tunnel for now. Emerald is reached through the KL1 and KT1 hub tunnels instead. Links Fibre to...
EdgeRouter Site Build Standard (IPsec IKEv2 + BGP to Cato)
Overview Item Value Applies to Ubiquiti EdgeRouter sites (EdgeOS 3.0.1): Gembrook, Cockatoo, Gembrook West, Mater Christi (Emerald deferred) Design Route-based IPsec IKEv2 VTIs to Cato Melbourne (primary) and Sydney (secondary) PoPs, eBGP to Cato ASN 64515 Sta...