A Bash script to automate the initial configuration and security hardening of Debian and Ubuntu servers. VPS hardening script tested on several cloud VPS providers and local VMs.
-
Updated
Nov 2, 2026 - Shell
GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing github.com — Build software better, together
#
server-securityHere are 135 public repositories matching this topic...Language: All
Filter by language
Sort: Most stars
Sort options
A Bash script to automate the initial configuration and security hardening of Debian and Ubuntu servers. VPS hardening script tested on several cloud VPS providers and local VMs.
debian ubuntu bash-script server-setup setup-script vps-security vps-setup linux-hardening server-security vm-security vm-setup vps-hardening
Cloudflare WAF (Web Application Firewall) rules with a script for automatic updates. Block unwanted and malicious requests to improve the security of your origin server. The solution also supports integration with SniffCat and AbuseIPDB.
nodejs express server expressjs waf expression cloudflare expressions antibot antibots server-security cloudflare-firewall-rules cloudflare-waf-rules cloudflare-firewall cloudflare-waf cloudflare-expressions cloudflare-expression cloudflare-waf-expressions cloudflare-waf-expression server-safety
Fully automated host & network intrusion detection platform. Detects malware from behavioural patterns rather than signatures and enables deeper visibility than legacy tools.
security devops cloud monitoring vps vpc cybersecurity visibility suricata xdr siem osquery security-tools server-security vpc-endpoints
This script automates the scanning process using the OpenSCAP Security Guid to hardening Ubuntu systems, aligning with DISA-STIG compliance for Ubuntu 24.04. LTS minimum. It includes a range of security enhancements and configurations designed to strengthen the security posture of Ubuntu servers.
linux ubuntu shell-script ubuntu-server openscap security-tools linux-security linux-hardening server-security disa-stig server-hardening security-enhanced-linux wbfoss
Idempotent VPS hardening for Ubuntu — SSH, firewall, fail2ban, kernel tuning, auditd, SOPS secrets, and optional AI agent workspace security. Dry-run first, lockout protection built in.
bash devops debian ubuntu firewall selfhosted sysadmin vps infosec security-hardening homelab ufw linux-security linux-hardening server-security ssh-hardening server-hardening hardening-script
🛡️ VPS-SECURE is the only script that turns a bare VPS into an operational fortress — honeypot, collaborative IPS, real-time dashboard, Telegram alerts — in 15 minutes and 1 command, with zero Linux expertise required. 🚀⚡
linux bash docker security devops ubuntu selfhosted sysadmin vps hardening auditd rkhunter homelab stig aide cis-benchmark server-security endlessh crowdsec vps-hardening
让服务器自己照顾自己 — 自动自愈的服务器运维与安全 Agent,磁盘/内存/证书/防暴力破解/挖矿查杀,16MB 单二进制零依赖
mysql linux nginx golang devops monitoring ops ssl-certificates self-healing aiops baota server-security
A bot that uses various APIs to scan links directly inside any discord server automatically
link-checker open-source discord-bot mit-license moderation-bot phishing-attacks security-tools malware-detection good-first-issue phishing-protection phishing-detection real-time-analysis good-first-pr server-security good-first-project virustotal-api moderation-discord-bot good-first-contribution community-safety thatsinewave
An nftables configuration file with layer 7 filtering and DDoS protection for a Minecraft server. Includes rules for blocking fake sessions, query floods, and bot attacks, as well as filtering for IP addresses and port numbers.
minecraft firewall minecraft-server ddos-attacks network-security ddos-mitigation packet-filtering ddos-protection firewall-rules nftables security-rules server-security packet-blocking server-protection network-filtering layer-7-filtering server-firewall server-hardening network-hardening ddos-configuration
Resources for Cyber Security
incident-response resources cybersecurity penetration-testing web-security malware-analysis information-security cyber-security network-security web-hacking information-assurance endpoint-security server-security
Basic Implementation about Security of Server and Application Server
Real-time Linux server security dashboard — beautiful TUI with attack maps, gauges, and sparklines. Built in Rust. Zero dependencies. cargo install vigil
linux rust security terminal monitoring dashboard firewall tui cybersecurity network-monitoring fail2ban server-security ratatui brute-force-detection
discord cybersecurity vulnerability infosec 0day responsible-disclosure security-research trust-and-safety server-security discord-security-bot discord-exploit discord-bug
Lightweight security agent for Linux servers — SSH brute force, WAF, bot detection, Docker/Kubernetes native. Deploy via curl, Docker, Helm.
go linux docker kubernetes ssh security helm firewall waf owasp intrusion-detection brute-force bot-detection linux-security daemonset container-security helm-chart server-security
Lightweight Linux firewall and automatic IP-ban engine — a modern Fail2Ban/CSF alternative with nftables and iptables support.
linux golang firewall iptables self-hosted cybersecurity intrusion-detection fail2ban intrusion-prevention netfilter dnsbl network-security port-scan-detection ddos-protection nftables linux-security ip-blocking server-security brute-force-protection fail2ban-alternative
Web-Security(Web 安全)
javascript security website sql database web cookie xss csrf web-security samesite samesite-cookies data-security server-security samesite-cookie-csrf cookies-csrf cookies-document xss-cookies
A powerful IP Blacklist Remover and Checker tool by ApexSofteck that helps developers and system administrators detect blacklisted IPs, monitor reputation, and automate removal from DNSBL/RBL services to ensure secure communication and better email deliverability.
email-marketing spam-protection network-security dev-tools ip-reputation email-deliverability dns-blacklist server-security automation-tool cybersecurity-tools rbl-checker blacklist-checker ip-blacklist-remover smtp-security apexsofteck ip-cleanup
A practical project to harden an Ubuntu server using security best practices.
ubuntu-server fail2ban devsecops linux-hardening kernel-hardening server-security defense-in-depth security-blueprint ssh-hardening security-auditing
🛡️ Autonomous AI Cybersecurity Log Analyst. An LLM-Agnostic SOC agent (Gemini, OpenAI, Claude, Local/Ollama) for Enterprise Linux Servers. Parses Apache, Nginx, MariaDB, and Journalctl logs. Features zero data egress, PII scrubbing, and auto-generated WAF (CSF) remediation with strict allowlisting.
devops log-analysis firewall bash-script soc system-administration linux-security server-security ciso bot-mitigation openai-api ai-agent cybersecurity-tools server-hardening claude-ai local-llm ollama gemini-ai
Add this topic to your repoTo associate your repository with the server-security topic, visit your repo's landing page and select "manage topics." |
| You are visitor 01402503 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |