Idempotent VPS hardening for Ubuntu — SSH, firewall, fail2ban, kernel tuning, auditd, SOPS secrets, and optional AI agent workspace security. Dry-run first, lockout protection built in.
bash devops debian ubuntu firewall selfhosted sysadmin vps infosec security-hardening homelab ufw linux-security linux-hardening server-security ssh-hardening server-hardening hardening-script
-
Updated
Feb 18, 2026 - Shell