MerchantryTidbits

deploy-infra / cli

vpskit

Capability: vpskit

Use it when

  • You just got a fresh VPS and want SSH hardening, firewall, fail2ban, and Docker set up without following a long manual checklist
  • You want to deploy a dockerized app from a Git repo to your own server with a domain, automatic HTTPS, and one-command rollback

What it solves

Not the fit when

  • Servers you lack root access to or distributions outside Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, and Fedora.
  • Running without verified console or recovery access: SSH hardening disables root login and password authentication and can lock you out if key transfer or firewall configuration is wrong.
  • Unattended CI/CD or multi-server orchestration; those are roadmap items.
  • Using its backup feature without independent restore testing and an off-host copy.
  • Piping the mutable `main` branch directly into a privileged shell without reviewing or pinning the script.
  • multi-server fleet orchestration
  • non-interactive CI/CD pipelines (roadmap only)
  • kubernetes or managed platform deploys

Install

Download `https://raw.githubusercontent.com/mariusdjen/vpskit/main/vpskit.sh` to a local file, inspect or pin it to a reviewed commit, then run it from Git Bash/WSL/macOS/Linux. Do not pipe an unreviewed moving `main` script directly into Bash.

Invoke

Run the script and follow the interactive menu: initial setup performs system update, non-root user, SSH key hardening, UFW/firewalld, fail2ban, Docker, and Caddy with Let's Encrypt; then choose Deploy an application (Git URL, domain, port, .env) or Update/Rollback/Backup from the same menu

Alternatives

No reviewed alternatives recorded yet.