Engineering
Lock down your VPS
Your AI audits your server and closes it to the internet: Tailscale for admin, Cloudflare Tunnel for web, firewall and SSH done right, bots that run safely. It never locks you out: every risky change rolls back by itself.
Checked automatically · v1.1.0 · Oct 23
How your AI uses it
Your AI reads it and applies it to your work. It never runs anything from the kit. How kits work ›
- 1. Read
Your AI reads SKILL.md first, then only the files your task needs
- 2. Apply
It applies the know-how to your own work, in the AI you already use
- 3. Check
6 checks before it shows you the result
Details
Your AI reads these when your task needs them. Always the latest version.
- VPS security kitREADME.md
- Servers that run AI agents and botsreferences/ai-agents.md
- Hardening playbookreferences/playbook.md
- systemd sandbox for an app or botreferences/systemd-hardening.md
- Tailscale policy: servers receive, never initiatereferences/tailscale-policy.md
- Read-only security audit for a Linux VPS (Debian/Ubuntu first, others best effort).scripts/audit.sh.txt
- Dead man's switch for risky network changes (firewall, sshd, Tailscale).scripts/lockout-guard.sh.txt
- VPS security kitSKILL.md
- Never print secret values; report the path and permissions instead.
- Ask before each change that can cut access, showing the command and its rollback.
- Never close a port the server's business depends on (VPN, public API, webhooks) without the person's yes.
v1.1.0Oct 23, 2026New
Lessons from a real lockdown
Everyone running this kit gets updates. See changelog ›
- Type
- Reference
- License
- Own use
- Uses
- 0