The first hour on a new server

Eight scripts and two Compose stacks for a new Ubuntu 24.04 or 22.04 server: swap, key-only SSH with a rollback, automatic security updates, fail2ban, a firewall that also closes the ports Docker publishes, encrypted backups with a tested restore, and a monthly audit. On 2 Oct 2026 all 84 checks passed on both Ubuntu versions.

Do it by hand (free)

1. free -m; add a 2 GB swap file if Swap is 0.
2. Put your SSH key on the server, test a second login, then set PasswordAuthentication no.
3. apt install unattended-upgrades fail2ban.
4. Test your open ports from outside the server, not with ufw status.
5. Back up Docker volumes off the server, and restore one once.

Or use the kit

Get the starter kit: pay what you want, USD 9 suggested, USD 0 is fine. What is inside.