# Server Setup

> Linux server configuration. Firewall, SSH hardening, user management, system updates. Use for initial VPS setup or server hardening. Don't use for application deployment.

- Skill: `neuron-one/server-setup` (Agent Skill)
- Install (CLI): `npx skillmds@latest add neuron-one/server-setup`
- Raw SKILL.md: https://api.skillmd.com/api/skills/neuron-one/server-setup/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: neuron-one (https://skillmd.com/u/neuron-one)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/neuron-one/server-setup

---


# Server Setup & Hardening

## Initial Setup
1. Update system packages
2. Create non-root user with sudo
3. Disable root SSH login
4. Configure SSH key authentication (disable password)
5. Change SSH port from default 22
6. Configure UFW firewall (allow only needed ports)

## Firewall Rules
- 443/tcp: HTTPS (always)
- 22/tcp or custom: SSH (your IP only)
- 80/tcp: HTTP (redirect to HTTPS)
- Block everything else by default

## Security
- Fail2ban for brute-force protection
- Automatic security updates (unattended-upgrades)
- Log rotation configured
- Swap file for memory overflow

## Monitoring
- System metrics: htop, df, free
- Log monitoring: journalctl
- Uptime monitoring: external service