skills.rest
neuron-one
neuron-oneCOMMUNITY
Explore all skills by this author →
GitHub

server-setup

Automate secure initial configuration and hardening of Linux servers.

25|10|Updated Apr 1, 2026
Search Tags:#automation#monitoring#linux#ssh#firewall#vps#server-hardening
One-click install
npx skills add https://github.com/neuron-one/GODMODE --skill server-setup-neuron-one
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: server-setup
Source: https://github.com/neuron-one/GODMODE/tree/main/skills/infrastructure/server-setup
Command: npx skills add https://github.com/neuron-one/GODMODE --skill server-setup-neuron-one

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Establishes a secure, repeatable baseline for Linux servers by handling initial setup, SSH hardening, user access, firewall rules, and ongoing security hardening.

Core Features & Use Cases

  • Initial Setup: update system packages, create a non-root user with sudo, disable root SSH login, configure SSH key authentication, change SSH port, and configure UFW firewall.
  • Firewall Rules: 443/tcp: HTTPS (always); 22/tcp or custom: SSH (your IP only); 80/tcp: HTTP (redirect to HTTPS); Block everything else by default.
  • Security: Fail2ban for brute-force protection, automatic security updates (unattended-upgrades), log rotation configured, and a swap file for memory management.
  • Monitoring: system metrics, log monitoring, and uptime monitoring via an external service.

Quick Start

Apply this skill to a fresh Linux VPS to implement the baseline hardening and setup.

Frequently Asked Questions about server-setup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Linux server hardening on a new VPS?▼

Automate Linux server hardening by applying a configuration baseline that updates packages, creates a non-root sudo user, configures SSH keys, and enables UFW firewall rules. This establishes a secure, repeatable foundation for VPS provisioning.

What does SSH hardening involve for Linux server setup?▼

SSH hardening involves disabling root login, configuring passwordless SSH key authentication, and changing the default SSH port. These steps protect against unauthorized access and brute-force attacks during initial server configuration.

Can I configure UFW firewall rules to only allow my IP for SSH?▼

Yes, you can configure UFW firewall rules to allow SSH access exclusively from your IP. The setup blocks all non-essential traffic by default while permitting HTTPS and HTTP connections.

Does Fail2ban work with unattended upgrades for server security?▼

Fail2ban works alongside unattended upgrades to provide comprehensive server security. Fail2ban prevents brute-force attacks while unattended upgrades automatically install security patches for ongoing protection.

What is the best way to manage swap and monitor system metrics on Linux?▼

The best way to manage swap and monitor system metrics is to configure a swap file for memory management and integrate basic monitoring hooks for uptime and logs. This ensures server stability and alerts.

Are these Linux server hardening steps applicable across different distributions?▼

Yes, the Linux server hardening steps are applicable across different Linux distributions. The setup focuses on universal hardening practices like log rotation, UFW rules, and user management for broad compatibility.

Related Skills

Explore More Software Engineering Skills→
mikr13mikr13
6

ssh-hardening

Harden SSH on Linux VPS servers by enforcing key-based authentication and disabling root login.

Community
Advanced
tachfineamnaytachfineamnay

Docker & Containers

Containerize application stacks with Docker and Docker Compose.

Community
Advanced
jc180105jc180105

Infrastructure Maintainer

Automate monitoring, backup, and configuration management for cloud infrastructure.

Community
Advanced
aiunlocked1412aiunlocked1412
14

system-admin

Secure Linux VPS servers with SSH hardening, UFW, fail2ban, and Nginx TLS.

Community
Advanced