Vps Provisioning

Name: Vps Provisioning
Author: ku5ic

ASecurity

VPS provisioning patterns for Linux servers covering initial setup, firewall, nginx reverse proxy, SSL/TLS with Let's Encrypt, systemd service management, and server hardening. Use whenever the project contains Ansible playbooks, shell provisioning scripts, nginx configs, systemd unit files, or certbot references, OR the user asks about VPS setup, server hardening, ufw, fail2ban, nginx reverse proxy, certbot, Let's Encrypt, systemd services, unattended-upgrades, even if VPS is not mentioned b...

2 stars
0 votes
0 copies
1 view
Added October 5, 2026

ai-agentsshellsecurity

Security analysis

A100/100

Pro scans all 8 files and shows the line behind each finding

Scanned October 5, 2026

npx -y skills add ku5ic/claude-kit --skill vps-provisioning --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Vps Provisioning?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Vps Provisioning

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/ku5ic-vps-provisioning/badge)](https://www.skillsdirectory.com/skills/ku5ic-vps-provisioning)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: vps-provisioning
description: VPS provisioning patterns for Linux servers covering initial setup, firewall, nginx reverse proxy, SSL/TLS with Let's Encrypt, systemd service management, and server hardening. Use whenever the project contains Ansible playbooks, shell provisioning scripts, nginx configs, systemd unit files, or certbot references, OR the user asks about VPS setup, server hardening, ufw, fail2ban, nginx reverse proxy, certbot, Let's Encrypt, systemd services, unattended-upgrades, even if VPS is not mentioned by name.
---

# VPS provisioning patterns

Targeting Debian 12 (Bookworm) and Ubuntu 24.04 LTS. Commands and package names are Debian/Ubuntu unless noted. Verify against your distribution's current docs.

## Reference files

| File                                           | Covers                                                               |
| ---------------------------------------------- | -------------------------------------------------------------------- |
| [initial-setup.md](reference/initial-setup.md) | Non-root sudo user, SSH key auth, disabling root/password login      |
| [firewall.md](reference/firewall.md)           | ufw default policy, allow/deny rules, rate limiting                  |
| [nginx.md](reference/nginx.md)                 | Server blocks, HTTPS redirect, reverse proxy, gzip, security headers |
| [ssl-tls.md](reference/ssl-tls.md)             | certbot, Let's Encrypt issuance, auto-renewal, renewal hooks         |
| [systemd.md](reference/systemd.md)             | Unit file structure, Type values, Restart, EnvironmentFile, journald |
| [hardening.md](reference/hardening.md)         | fail2ban, unattended-upgrades, SSH config, server_tokens             |
| [anti-patterns.md](reference/anti-patterns.md) | Severity-labeled anti-patterns to flag in review                     |

## References

- https://certbot.eff.org/
- https://nginx.org/en/docs/
- https://wiki.debian.org/UnattendedUpgrades
- https://manpages.ubuntu.com/manpages/noble/man8/ufw.8.html

## Version notes

Checked: 2026-09-26 against https://ubuntu.com/about/release-cycle and https://eff-certbot.readthedocs.io/en/latest/using.html

Check distribution LTS support windows before provisioning.

- Ubuntu 24.04 LTS support ends May 2029 (standard), May 2034 (ESM), May 2039 (Legacy add-on). Corrected from April.
- Certbot 4.0.0: renewal threshold moved from a fixed 30 days to 1/3 of certificate lifetime; see ssl-tls.md.
- Certbot version and plugin names change; verify `certbot --version` and available plugins.