alsk1992/harden

VPS Hardening

Security auditing and automated hardening for remote servers.

Commands

/harden audit <host>

Run security audit against a server. Checks:

• System updates
• Auto-updates configuration
• SSH root login status
• Password authentication
• Firewall status
• Fail2ban status
• System uptime
• Listening services
• Sudo user configuration

/harden fix <host>

Apply safe fixes that won't lock you out:

• Install system updates
• Enable unattended-upgrades
• Configure UFW firewall
• Install and enable fail2ban
• Set SSH MaxAuthTries

/harden emergency <host>

Quick 10-minute hardening for new servers:

• Full system update
• Firewall setup
• Fail2ban installation
• Root password lock

/harden report <host>

Generate markdown security report.

Options

| Option | Description | |--------|-------------| | --user=NAME | SSH user (default: root) | | --dry-run | Preview changes without applying |

Examples

/harden audit 192.168.1.100
/harden fix myserver.com --user=admin
/harden emergency vps.example.com --dry-run
/harden report server.io > security-report.md

Security Checks

| Check | Pass Criteria | |-------|---------------| | System Updates | 0 pending updates | | Auto Updates | unattended-upgrades installed | | Root Login | PermitRootLogin no | | Password Auth | PasswordAuthentication no | | Firewall | UFW active or iptables configured | | Fail2ban | Service running | | Uptime | < 90 days | | Services | < 10 listening ports | | Sudo Users | At least one non-root sudo user | | MaxAuthTries | Set to 3 or less |