Base build for a secure server.
Go to file
2024-12-08 14:18:41 -08:00
fail2ban make systemd default backed for fail2ban 2024-12-08 14:17:31 -08:00
sbin force 2 letter country code to be lower case 2024-07-26 14:18:17 -07:00
COPYING initial commit 2022-11-17 09:47:11 -08:00
install.sh make sure systemd-timesyncd is installed as the time-daemon, remove unwanted packages 2024-12-08 14:18:41 -08:00
README.md Update README.md 2024-07-26 16:09:13 -07:00

Base Stack

Base Stack installs some basic applications and configs that are common to any server build. Specifically automatic updates and firewald with fail2ban for a secure server setup.

Requirements

A minimal Debian 12 server install with no extra services or packages installed.

Install

If you already have git installed:

cd /usr/local/src/
git clone https://git.stack-source.com/msb/base-stack.git
cd base-stack
bash install.sh

If you do not have git installed yet use wget & tar method instead (installer will add git to the OS for future use):

cd /usr/local/src/
wget https://git.stack-source.com/msb/base-stack/archive/master.tar.gz --output-document=base-stack-master.tar.gz
tar -xzf base-stack-master.tar.gz
cd base-stack
bash install.sh

Usage

See the wiki for additional info and how to use the include bash scripts to manage blacklists.

MTA

For an integrated and full featured mail server configuration it's recommended to install vmail-stack: https://git.stack-source.com/msb/vmail-stack If you just want a minimal smtp mail server for getting automated emails (cron, website contact forms, etc.) off the server you can install and configure exim4-daemon-light with these commands:

apt -y install exim4-daemon-light mailutils
sed -i "s|dc_eximconfig_configtype='local'|dc_eximconfig_configtype='internet'|g" /etc/exim4/update-exim4.conf.conf
/usr/sbin/update-exim4.conf
systemctl restart exim4
echo "user@example.com" > /root/.forward

License

Copyright (c) 2024 Matthew Saunders Brown matthewsaundersbrown@gmail.com
GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)