Advanced Search
Search Results
86 total results found
Duo MFA Integration
Scope Duo MFA is enforced in two places: SSH login (v2.3+) — via PAM keyboard-interactive after publickey auth sudo (v2.4+) — via PAM at the auth phase, with AD password as the post-Duo factor The role uses Duo Security's official duo-unix package, not Ub...
SSH Hardening Reference
What This Page Covers This page walks through every directive in roles/ssh-baseline/templates/sshd_hardening.conf.j2 and explains how it lands on the target host. The deployed file is /etc/ssh/sshd_config.d/10-pbr-hardening.conf. The hardening is aligned wit...
Playbook Reference (Preflight, Verify, Teardown)
Playbooks Overview The repository contains four playbooks under playbooks/: PlaybookPurposeChanges target? preflight.ymlVerify readiness; no changesNo ssh-baseline.ymlRun preflight then apply the baseline roleYes verify.ymlPost-deployment validationNo te...
Known Limitations, Troubleshooting & Version History
Known Limitations & Accepted Risks LXC auditd compliance gap Affected hosts: pbr-graylog-kl1, pbr-thingsboard-kl1 Issue: auditd cannot run inside LXC containers. The kernel audit netlink interface is isolated from container namespaces. Forcing auditd to star...
Ansible
Ansible-based configuration management for PBR Linux infrastructure. Hosts the ssh-baseline role and related playbooks. Source: github.com/Puffing-Billy-Railway/pbr-infra
Capacity Management
Operational guides for managing Belgrave-Gembrook services in CustomLinc.
Adjusting the Train Capacity (Manifest)
Overview Use this procedure to change the capacity for general and single-journey passengers. This affects the four main legs: Belgrave–Lakeside, Lakeside–Gembrook, Gembrook–Lakeside, and Lakeside–Belgrave. Do not manually edit these individual legs — changin...
Adjusting the Belgrave–Gembrook Return Allocation
Overview Use this procedure to change the capacity for the Belgrave – Gembrook Allocation (Return) product — the full return journey product, typically set to 56 seats. This procedure includes an extra step: you must also update the Allocation Group to match t...
Capacity Overview & Quick Reference
Key Concepts: Manifests and Legs In CustomLinc, a manifest represents the overall service (e.g. the 11:00 Bel-Lak-Gem / 15:05 Gem-Lak-Bel service). It appears as a green highlighted row in the Manifests view. Within each manifest, individual legs represent eac...
Booking Management
Guides for creating bookings in CustomLinc.
Strategic Partnerships Grant
Overview This guide explains how to create a booking in CustomLinc for the Strategic Partnerships Grant (SPG) program. Selecting the correct agent ensures the Source and Promotion Code are automatically assigned. Steps In CustomLinc, click Add and select Crea...
CustomLinc TOL → Queue-it Availability JSON
Overview Workflow IDT76MXW3QRGcoIBbo Webhook URLhttps://n8n.pbr.org.au/webhook/availability/tol n8n editorhttps://n8n.pbr.org.au/workflow/T76MXW3QRGcoIBbo TriggerHTTP GET/POST webhook Season2026-06-26 → 2026-07-19 (24 dates) ProductTOL (18:00 Lakeside Twilig...
Node-RED Queue Migration — msg-queue to queue-gate
Overview Purpose Migrate all level crossing Pi Node-RED flows from node-red-contrib-msg-queue to node-red-contrib-queue-gate Trigger msg-queue fails to install on rebuilt Pis — native sqlite3 dependency does not compile on modern Node.js/ARM Original flow f...
Enabling Aztec Code on Datalogic Gryphon Scanners
Aztec Code is disabled by default on the Datalogic Gryphon 2D scanners (GD44XX / GBT4400 / GM440X, including the 4400-BK). If the scanner reads normal QR and 1D barcodes but ignores Aztec codes, enable the symbology using the steps below. Enable Aztec Code Sca...