skills.rest
aiunlocked1412
aiunlocked1412COMMUNITY
Explore all skills by this author →
WebsiteGitHub

system-admin

Secure Linux VPS servers with SSH hardening, UFW, fail2ban, and Nginx TLS.

14|6|Updated Apr 16, 2026
Search Tags:#monitoring#backup#nginx#fail2ban#sysadmin#server-hardening#restic
One-click install
npx skills add https://github.com/aiunlocked1412/claude-skill-unlock --skill system-admin-aiunlocked1412
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: system-admin
Source: https://github.com/aiunlocked1412/claude-skill-unlock/tree/main/skills/03-tech/system-admin
Command: npx skills add https://github.com/aiunlocked1412/claude-skill-unlock --skill system-admin-aiunlocked1412

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Many VPS and self-hosted servers are deployed without proper hardening, monitoring, or tested backups, leaving services vulnerable to brute-force attacks, data loss, and long downtimes. This Skill provides a practical, production-oriented playbook to secure servers quickly, automate backups, and establish monitoring and recovery procedures.

Core Features & Use Cases

  • Security baseline: SSH key-only access, disable root login, UFW firewall, and fail2ban configuration to mitigate brute-force attacks.
  • Web hosting: Nginx reverse proxy patterns, TLS with Let's Encrypt, security headers, and systemd service management for app processes.
  • Backup & recovery: Automated restic-based backups to Backblaze B2/S3, retention policies, and quarterly restore testing with a disaster recovery runbook.
  • Monitoring & alerts: Netdata, Uptime Kuma, Prometheus/Grafana guidance and alert channel examples (Line/Discord/Telegram).
  • Use cases: Initial VPS hardening, deploying production web apps, responding to disk-full or service-crash incidents, and routine ops maintenance.

Quick Start

Set up a secure Ubuntu 24.04 VPS with SSH key authentication, UFW and fail2ban hardening, Nginx reverse proxy with Let's Encrypt, automated restic backups to Backblaze B2, and Netdata monitoring plus a simple disaster recovery runbook.

Frequently Asked Questions about system-admin

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure a Linux VPS for production web apps?▼

Secure a Linux VPS by configuring SSH key-only access, disabling root login, applying UFW firewall rules, and enabling fail2ban to block brute-force attacks against production web applications.

What is the best way to automate restic backups to Backblaze B2?▼

Automate restic backups to Backblaze B2 by scheduling automated jobs, defining retention policies, and establishing a disaster recovery runbook with quarterly restore testing to validate data recovery.

How do I configure Nginx reverse proxy with Let's Encrypt TLS?▼

Configure Nginx reverse proxy with Let's Encrypt TLS by applying security headers, terminating SSL connections, and managing app processes via systemd to route traffic securely to backend services.

Does this server hardening process work with Ubuntu and CentOS?▼

Yes, the server hardening process applies to Ubuntu, Debian, and CentOS VPS environments, providing consistent SSH hardening, firewall configuration, and service management across different Linux distributions.

How do I set up Netdata and Uptime Kuma monitoring with alerts?▼

Set up Netdata and Uptime Kuma monitoring by deploying both tools to track server metrics and uptime, then configure alert channels like Discord, Telegram, or Line to receive incident notifications.

What should I do when my Linux server disk is full or a service crashes?▼

When a Linux server disk is full or a service crashes, follow the incident runbook procedures included in the server hardening playbook to diagnose systemd service failures and restore operations quickly.

Related Skills

Explore More Software Engineering Skills→
mikr13mikr13
6

ssh-hardening

Harden SSH on Linux VPS servers by enforcing key-based authentication and disabling root login.

Community
Advanced
lawless-mlawless-m

Reverse Proxy Deployment

Deploy web applications behind an Apache reverse proxy with ProxyPass rules.

Community
Advanced
haxlyshaxlys

grafana-dashboards

Create production Grafana dashboards with JSON templates and Prometheus data sources.

Community
Intermediate
baphledbaphled
1

virtual

Provision and manage VPS instances across DigitalOcean, Linode, Hetzner, and Vultr.

Community
Intermediate