openclaw-harden

To harden Ubuntu 24.04 for production, you need to configure UFW, fail2ban, unattended-upgrades, and secure SSH settings. This skill automates that entire process, applying robust security postures and credential isolation.

The best way to configure fail2ban and UFW is through automated hardening scripts that ensure strict firewall rules and intrusion prevention. This skill sets up both tools alongside kernel sysctl parameters for a robust security posture.

Yes, SSH hardening with TOTP MFA works on Ubuntu 24.04 using google-authenticator. This skill implements strict SSH hardening including modern cipher suites, rate limiting, and optional TOTP MFA for secure access control.

Yes, you need root or passwordless sudo access to configure unattended-upgrades and secure SSH settings. This skill requires elevated privileges to modify system-level security configurations and kernel sysctl parameters.

You can isolate sensitive credentials during Ubuntu server hardening through a structured conversation. This skill guides you through blast-radius management to define security boundaries and isolate credentials for the host.

Automated OS hardening requires prior completion of the openclaw-prereqs skill and targets fresh Ubuntu 24.04 servers only. It mandates root access and focuses strictly on bootstrapping security compliance rather than runtime threat detection.