Useful scripts for common tasks for VPSes

Requirements

• Debian 12 or Alpine 3.21 or FreeBSD 14.3
• working internet
• Root permissions, all scripts must be executed as root (sudo is fine)
• if virtualized, it must be Full virtualization (e.g. KVM) and NOT OS-level virtualization (e.g. OpenVZ)

Tutorial

1. CLONE this repo
2. Fill in variables
3. Run a script or scripts
   IMPORTANT: you must run this from the main (repo) directory, like you run ./debian/debian-secure.sh and as root

Scripts

• docker-root.sh - Installs Docker

• docker-rootless.sh - Installs Docker and creates a user for it

• tor-repo.sh - Adds the Tor repo.

• secure.sh:

  • Creates a user
  • disallows root and password login
  • creates a WireGuard profile
  • restricts SSH to it

  If you'd like, you can install mosh.

Typical workflow

Relevant for Debian

1. Update the system and reboot
2. Remove bloat like exim or cron
3. Setup systemd-networkd and remove other network managers
4. Get a random IPv6 (security through obscurity)
5. secure.sh
6. Install mosh, byobu
7. Save the connection info somewhere