DeerYang GitHub avatar

server-security-init-skill

DeerYang

An Agent Skill that safely initializes and hardens fresh Ubuntu/Debian SSH servers through a staged bootstrap flow with public-key authentication and verification.

Stars

32

7-day growth

No data

Forks

0

Open issues

0

License

MIT

Last updated

2026-06-26

AI repository intelligence
FR-AI / ANALYSIS

Why it is worth attention

It is designed specifically for AI agents, providing a structured, conservative guidance that emphasizes safety, verification, and staged changes to prevent lockouts.

Who it is for

  • AI agent developers integrating server initialization skills
  • System administrators using AI-assisted server management
  • DevOps engineers automating secure server provisioning
  • Security-conscious users deploying new Ubuntu/Debian servers

Use cases

  • Bootstrapping a fresh Ubuntu/Debian server with SSH key-only access
  • Hardening SSH configuration including port change, root login disable, and password auth disable
  • Configuring UFW default-deny firewall and fail2ban sshd jail
  • Verifying security settings and recovery from misconfigurations

Strengths

  • Uses a staged approach: sets up public-key login before disabling old access methods
  • Verification commands rely on server-side truth (ss, sshd -T, systemctl, ufw status)
  • Includes explicit checks for systemd socket activation and fail2ban ignoreip
  • Provides a validation script and safety notes to prevent common mistakes

Considerations

  • Only supports Ubuntu/Debian with OpenSSH, systemd, UFW, and fail2ban
  • Requires an existing working SSH session for safe changes; recovery relies on provider consoles or VNC
  • Skill is guidance for AI-assisted administration, not a substitute for understanding the commands

README quick start

Usage

Description

Agent Skill for safely initializing and hardening fresh Ubuntu/Debian SSH servers

Related repositories

Similar projects matched by category, topics, and programming language.

lopopolo
Featured
lopopolo GitHub avatar

harness-engineering

Harness Engineering is a methodology for improving coding agent outputs by carefully crafting the environment around them—providing curated context, tools, and executable constraints that encode an organization’s nonfunctional requirements and cumulative lessons.

AI & Machine LearningAI Agents
2,390
slvDev
Featured
slvDev GitHub avatar

esp32-ai

A 28.9 million parameter language model runs on an $8 ESP32-S3 microcontroller entirely on-device, generating simple stories at about 9.5 tokens per second.

AI & Machine LearningLarge Language Models
1,960
littledivy
Featured
littledivy GitHub avatar

mimic

mimic captures traffic from any iOS or web app and automatically generates a Python client library that lets you call the app's API like a regular library.

AI & Machine Learning
1,482