{"repo":"ranjith-src/vps-harden","free":true,"listed":false,"github":"https://github.com/ranjith-src/vps-harden","clone":"git clone https://github.com/ranjith-src/vps-harden.git","description":"Idempotent VPS hardening for Ubuntu — SSH, firewall, fail2ban, kernel tuning, auditd, SOPS secrets, and optional AI agent workspace security. Dry-run first, lockout protection built in.","language":"Shell","stars":23,"topics":["bash","debian","devops","firewall","homelab","infosec","linux-hardening","linux-security","security-hardening","selfhosted"],"license":"MIT","category":"self-hosted-apps","readme_excerpt":"vps-harden One script. No dependencies. Dry-run first. Lockout protection built in. Idempotent Bash script to harden an Ubuntu VPS. Run it once on a fresh server or repeatedly to verify and fix drift. Every change is previewed before it's applied, and SSH lockout protection rolls back automatically if something goes wrong. --- Table of Contents - Why vps-harden - Quick Start - What It Does - Security Scorecard - server-report - Parameters - Config File - Lockout Protection - Compatibility - Documentation - Contributing - License --- Why vps-harden Most VPS hardening guides are long checklists you follow manually. Most scripts are interactive, not idempotent, and will break if you run them twice. This tool is different: - Idempotent — checks current state before every action. Safe to re-run anytime. - Dry-run mode — preview every change before applying. Nothing is modified until you're ready. - Modular — run all 18 modules or pick only what you need with --skip and --only . - Lockout protection — validates SSH config, keys, firewall rules, and AllowUsers before restarting. Auto-rolls back on failure. - Interactive or CLI — setup wizard for first runs, fully non-interactive CLI for automation. - Single file, zero dependencies — just Bash. No Python, no Ansible, no agents. --- Quick Start Install: Interactive wizard (recommended for first run): The wizard auto-detects SSH keys, your IP, and timezone — then offers a dry run before applying. Or use CLI flags directly: New to VPS s","default_branch":null,"files":null,"tree":[],"storefront":"/r/ranjith-src","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/ranjith-src/vps-harden/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}