Server Setup Script Generator

Select options, then download a single .sh script.

System Setup Initial system update & upgrade Enable automatic security updates Configure timezone Set hostname Configure NTP time sync Configure swap file

Security & Hardening SSH hardening (disable root, key-only option) Install Fail2ban (intrusion prevention) Pre-login banner (SSH)

Select Banner Type:

Default banner - Standard security notice DOD CMMC Approved - Official Use Only / Restricted System

Post-login banner (MOTD) SSH 2FA (Google Authenticator PAM)

Docker & Services Install Docker + Docker Compose Create admin user for docker operations (non-login) Allow ports (UFW) Combine LAN ports (netplan bond + bridge, static IP)

User Management Create admin user with sudo access

Monitoring & Utilities Install monitoring tools (htop, iotop, netstat, etc.) Install build tools (build-essential, git, etc.)

General Configuration

Docker admin username SSH port

Hostname Timezone

Admin username (for new user) Swap size (GB) Swap is virtual memory - used when RAM is full. Prevents out-of-memory crashes.

Docker data directory path

Firewall ports (CSV) SSH public key (for admin user, one per line)

How to generate SSH keys:
1. On your local computer, run: ssh-keygen -t ed25519 -C "your_email@example.com"
2. Press Enter to accept default location (~/.ssh/id_ed25519)
3. Copy your PUBLIC key: cat ~/.ssh/id_ed25519.pub (or id_rsa.pub for RSA)
4. Paste the PUBLIC key here (starts with ssh-rsa or ssh-ed25519)
Note: You generate keys on YOUR computer, then paste the PUBLIC key here. The server will use it to authenticate you.

LAN bonding/bridging (only if enabled) LAN interfaces (CSV, e.g. eth0,eth1)

Static IP (CIDR) Gateway

DNS (CSV)

This will write a netplan file and apply it. Test carefully (risk of remote lockout).

System Owner Information

Owner Name Owner Website

Owner Email

Banners will use templates from loginbanner.md and postloginbanner.md