A collection of lightweight, robust shell scripts designed to streamline everyday Linux system administration, server hardening, resource monitoring, and automated disaster recovery.
An automated Bash script that applies essential baseline security configurations to fresh Debian, Ubuntu, or RHEL-based server deployments.
- Package Maintenance: Runs system updates and patches automatically.
- SSH Hardening: Disables root login and password authentication, enforcing secure key-based access.
- Firewall Control: Configures a default-deny ingress policy via UFW while explicitly allowing safe ports (SSH, HTTP, HTTPS).
- Kernel Security Tuning (
sysctl): Applies parameters to defend against common network threats like SYN floods and IP spoofing.
A lightweight monitoring script that evaluates critical system health metrics.
- Checks root partition disk usage against a predefined safety threshold (90%).
- Measures live memory consumption percentages.
- Reports 1-minute CPU load averages to spot resource spikes.
An operational disaster recovery script built for routine maintenance.
- Compresses targeted system directories (e.g.,
/etc) into timestampedtar.gzarchives. - Manages automated storage cleanup by pruning archives older than a defined retention period (default: 7 days) to conserve disk space.
- Linux environment (Ubuntu, Debian, RHEL/CentOS)
- Root or
sudoprivileges
To run the server hardening script:
chmod +x harden.sh
sudo ./harden.sh