root
37 lines
830 B
Markdown
37 lines
830 B
Markdown
# Sicherheit: Ubuntu LXC Standard-Setup
|
|
|
|
Standardisierter Installationsprozess fuer neue Ubuntu-LXC-Container.
|
|
|
|
Installiert unter anderem:
|
|
- Security-Basis: `ufw`, `fail2ban`, `unattended-upgrades`, `auditd`
|
|
- Admin-Tools: `git`, `curl`, `jq`, `tmux`, `htop`
|
|
- Runtime: `nodejs`, `npm`
|
|
- CLI: `@openai/codex`
|
|
|
|
## Standardprozess nach Download
|
|
|
|
```bash
|
|
git clone https://gitea.kanu1.duckdns.org/Kanu/Sicherheit.git
|
|
cd Sicherheit
|
|
chmod +x bin/sicherheit-install scripts/bootstrap_ubuntu_lxc_security.sh
|
|
./bin/sicherheit-install
|
|
```
|
|
|
|
Optional global verlinken:
|
|
|
|
```bash
|
|
sudo ln -sf "$(pwd)/bin/sicherheit-install" /usr/local/bin/sicherheit-install
|
|
sudo sicherheit-install
|
|
```
|
|
|
|
## Pruefen
|
|
|
|
```bash
|
|
fail2ban-client status
|
|
ufw status verbose
|
|
systemctl status unattended-upgrades --no-pager
|
|
node --version
|
|
npm --version
|
|
codex --help
|
|
```
|