Merge pull request #21 from buildplan/main

n/a
This commit is contained in:
buildplan
2025-06-30 13:06:15 +01:00
committed by GitHub
4 changed files with 34 additions and 9 deletions

24
.gitignore vendored Normal file
View File

@@ -0,0 +1,24 @@
*.log
*.tmp
*.bak
*.swp
.DS_Store
.AppleDouble
.LSOverride
*~
Thumbs.db
ehthumbs.db
Desktop.ini
.vscode/
.idea/
*.sublime-project
*.sublime-workspace
.env
secrets.env
*.backup

View File

@@ -1,6 +1,6 @@
# Debian & Ubuntu Server Setup & Hardening Script # Debian & Ubuntu Server Setup & Hardening Script
**Version:** v0.50 **Version:** v0.51
**Last Updated:** 2025-06-30 **Last Updated:** 2025-06-30
@@ -46,7 +46,7 @@ This script automates the initial setup and security hardening of a fresh Debian
### 1\. Download & Prepare Script ### 1\. Download & Prepare Script
``` ```
wget https://raw.githubusercontent.com/buildplan/setup_harden_server/main/du_setup.sh wget https://raw.githubusercontent.com/buildplan/du_setup/refs/heads/main/du_setup.sh
chmod +x du_setup.sh chmod +x du_setup.sh
``` ```
@@ -60,7 +60,7 @@ This command downloads the official checksum file and automatically compares it
``` ```
# Download the official checksum file # Download the official checksum file
wget https://raw.githubusercontent.com/buildplan/setup_harden_server/main/du_setup.sh.sha256 wget https://raw.githubusercontent.com/buildplan/du_setup/refs/heads/main/du_setup.sh.sha256
# Run the check (it should output: du_setup.sh: OK) # Run the check (it should output: du_setup.sh: OK)
sha256sum -c du_setup.sh.sha256 sha256sum -c du_setup.sh.sha256
@@ -75,7 +75,7 @@ sha256sum du_setup.sh
Compare the output hash to the one below. They must match exactly. Compare the output hash to the one below. They must match exactly.
`86d08c58198c1b754329484f6bba79326d847649467851dfa89da250b3e6fd6b` `91e0cd8daf4550c0c51733ad06dda7b6034a6084ee897371736c8414d0b5f02c`
### 3\. Run the Script ### 3\. Run the Script

View File

@@ -1,8 +1,9 @@
#!/bin/bash #!/bin/bash
# Debian 12 and Ubuntu Server Hardening Interactive Script # Debian 12 and Ubuntu Server Hardening Interactive Script
# Version: 0.50 | 2025-06-30 # Version: 0.51 | 2025-06-30
# Changelog: # Changelog:
# - v0.51: corrected repo links
# - v0.50: versioning format change and repo name change # - v0.50: versioning format change and repo name change
# - v4.3: Add SHA256 integrity verification # - v4.3: Add SHA256 integrity verification
# - v4.2: Added Security Audit Tools (Integrating Lynis and Optionally Debsecan) & option to do Backup Testing # - v4.2: Added Security Audit Tools (Integrating Lynis and Optionally Debsecan) & option to do Backup Testing
@@ -16,14 +17,14 @@
# configurations, user management, SSH hardening, firewall setup, and optional features # configurations, user management, SSH hardening, firewall setup, and optional features
# like Docker and Tailscale and automated backups to Hetzner storage box or any rsync location. # like Docker and Tailscale and automated backups to Hetzner storage box or any rsync location.
# It is designed to be idempotent, safe. # It is designed to be idempotent, safe.
# README at GitHub: https://github.com/buildplan/setup_harden_server # README at GitHub: https://github.com/buildplan/du_setup/blob/main/README.md
# #
# Prerequisites: # Prerequisites:
# - Run as root on a fresh Debian 12 or Ubuntu server (e.g., sudo ./du_setup.sh or run as root ./du_setup.sh). # - Run as root on a fresh Debian 12 or Ubuntu server (e.g., sudo ./du_setup.sh or run as root ./du_setup.sh).
# - Internet connectivity is required for package installation. # - Internet connectivity is required for package installation.
# #
# Usage: # Usage:
# Download: wget https://raw.githubusercontent.com/buildplan/setup_harden_server/refs/heads/main/du_setup.sh # Download: wget https://raw.githubusercontent.com/buildplan/du_setup/refs/heads/main/du_setup.sh
# Make it executable: chmod +x du_setup.sh # Make it executable: chmod +x du_setup.sh
# Run it: sudo ./du_setup.sh [--quiet] # Run it: sudo ./du_setup.sh [--quiet]
# #
@@ -89,7 +90,7 @@ print_header() {
echo -e "${CYAN}╔═════════════════════════════════════════════════════════════════╗${NC}" echo -e "${CYAN}╔═════════════════════════════════════════════════════════════════╗${NC}"
echo -e "${CYAN}║ ║${NC}" echo -e "${CYAN}║ ║${NC}"
echo -e "${CYAN}║ DEBIAN/UBUNTU SERVER SETUP AND HARDENING SCRIPT ║${NC}" echo -e "${CYAN}║ DEBIAN/UBUNTU SERVER SETUP AND HARDENING SCRIPT ║${NC}"
echo -e "${CYAN}║ v0.50 | 2025-06-30 ║${NC}" echo -e "${CYAN}║ v0.51 | 2025-06-30 ║${NC}"
echo -e "${CYAN}║ ║${NC}" echo -e "${CYAN}║ ║${NC}"
echo -e "${CYAN}╚═════════════════════════════════════════════════════════════════╝${NC}" echo -e "${CYAN}╚═════════════════════════════════════════════════════════════════╝${NC}"
echo echo

View File

@@ -1 +1 @@
86d08c58198c1b754329484f6bba79326d847649467851dfa89da250b3e6fd6b du_setup.sh 91e0cd8daf4550c0c51733ad06dda7b6034a6084ee897371736c8414d0b5f02c du_setup.sh