devops.sh

A helpful script to maintain servers with:

• an app user with no password and public key authentication
• UFW firewall blocking everything except SSH
• Docker and ufw-docker
• Netdata monitoring

Designed for Ubuntu on Hetzner and deployment with Kamal.

Usage

chmod +x devops.sh
./devops.sh

Hosts list

Hosts are read from and added to ~/.ssh/config.

Main menu

Connect...: Connect via SSH as the user or root

Check status: Test SSH connection as root and app, UFW status and rules, Docker and ufw-docker status, and Netdata status

Basic setup: Enable UFW and create app user

Install Docker: Install Docker and setup ufw-docker

Install Netdata agent: Install and setup Netdata agent

Open port...:

• On host: Open a port in UFW
• On container: Open a Docker container port to the internet, via ufw-docker

Test ports: Test which ports are open on the server

Add SSH key...: Add an SSH key to the authorized keys

Todo

• Install Netdata dashboard: Install Netdata, enable web dashboard, add haproxy with HTTP Basic Auth in front of it

Other resources

• Pipe to Mezmo logging script
• Dump PG keeping X backups
• HAProxy with letsencrypt auto SSL