What are the security considerations of having my server configs in a repo on Github with world read-only access. I know to not include /etc/shadow and other password files. I'd like to share any of my good ideas and allow others to contribute, but I don't want to roll out a welcome mat for crackers.
Generally speaking I wouldn't post my server configs anywhere outside my organization (though internally they are in git).
If you want to share your ideas the best thing you can do is write a whitepaper or howto with sanitized pieces of the relevant configuration files (using the domains & address ranges reserved for examples is always nice too). If you & others find it particularly valuable a USENIX/LISA presentation is certainly not out of the realm of possibility either.
Doing it this way has a few advantages: