vps-provisioninglisted
Install: claude install-skill ku5ic/dotfiles
# VPS provisioning patterns
Targeting Debian 12 (Bookworm) and Ubuntu 24.04 LTS. Commands and package names are Debian/Ubuntu unless noted. Verify against your distribution's current docs.
## Reference files
| File | Covers |
| ---------------------------------------------- | -------------------------------------------------------------------- |
| [initial-setup.md](reference/initial-setup.md) | Non-root sudo user, SSH key auth, disabling root/password login |
| [firewall.md](reference/firewall.md) | ufw default policy, allow/deny rules, rate limiting |
| [nginx.md](reference/nginx.md) | Server blocks, HTTPS redirect, reverse proxy, gzip, security headers |
| [ssl-tls.md](reference/ssl-tls.md) | certbot, Let's Encrypt issuance, auto-renewal, renewal hooks |
| [systemd.md](reference/systemd.md) | Unit file structure, Type values, Restart, EnvironmentFile, journald |
| [hardening.md](reference/hardening.md) | fail2ban, unattended-upgrades, SSH config, server_tokens |
| [anti-patterns.md](reference/anti-patterns.md) | Severity-labeled anti-patterns to flag in review |
## References
- https://certbot.eff.org/
- https://nginx.org/en/docs/
- https://wiki.debian.org/UnattendedUpgrades
- https://manpages.ubuntu.com/manpages/noble/man8/ufw.8.html
## Version n