m724/vpsmusthave
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update README.md

Browse source
This commit is contained in:
Minecon724 2025-07-01 19:16:11 +02:00
commit 66ac0174fb
1 changed files with 16 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

31
README.md
View file

@ -1,21 +1,21 @@
Scripts for vpses Useful scripts for common tasks for VPSes
### Requirements ### Requirements
- Debian 12 or Alpine 3.21 - Debian 12 or Alpine 3.21 or FreeBSD 14.3
- working internet - working internet
- Root permissions, all scripts must be executed as root (sudo is fine) - Root permissions, all scripts must be executed as root (sudo is fine)
- if virtualized, it must be **Full virtualization** (e.g. KVM) and NOT **OS-level virtualization** (e.g. OpenVZ) - if virtualized, it must be **Full virtualization** (e.g. **KVM**) and NOT OS-level virtualization (e.g. OpenVZ)
### Tutorial ### Tutorial
1. **CLONE** this repo 1. **CLONE** this repo
2. Edit `variables` 2. Fill in `variables`
3. Run a script or scripts \ 3. Run a script or scripts \
**IMPORTANT:** you must run this from the main directory, like `./debian/debian-secure.sh` **IMPORTANT:** you must run this **from the main (repo) directory**, like you run `./debian/debian-secure.sh` and **as root**
### Scripts ### Scripts
- `variables` - settings for the scripts - `docker-root.sh` - Installs Docker
- `docker-rootless.sh` - Installs Docker and creates a user for it - `docker-rootless.sh` - Installs Docker and creates a user for it
- `tor-repo.sh` - Adds the [Tor repo](https://support.torproject.org/apt/). Doesn't install tor or anything. - `tor-repo.sh` - Adds the [Tor repo](https://support.torproject.org/apt/).
- `secure.sh`: - `secure.sh`:
- Creates a user - Creates a user
- disallows root and password login - disallows root and password login
@ -24,11 +24,12 @@ Scripts for vpses
If you'd like, you can install mosh. If you'd like, you can install mosh.
### Checklist ### Typical workflow
1. Update system and reboot Relevant for Debian
2. Remove bloat like exim and cron (for low end servers) 1. Update the system and reboot
3. Setup systemd-networkd 2. Remove bloat like exim or cron
4. Change to random IPv6 to not expose your subnet 3. Setup systemd-networkd and remove other network managers
5. secure.sh 4. Get a random IPv6 (security through obscurity)
6. Install byobu 5. `secure.sh`
7. Save login info somewhere 6. Install mosh, byobu
7. Save the connection info somewhere