Here at openspace, this is our reference first boot script for any Debian / Ubuntu machine. It will perform the following actions:
- Prompt you to update the machine hostname
- Set your default locale to something that actually works
- Harden your SSH config by: 03.01. Prompting you to add your SSH public key and disable password authentication for secure key-based remote login 03.02. Prompting you to change the SSH listening port to 42022 03.04. Adding whichever port you choose to the UFW allowed ports, install and enable UFW
- Prompt you to set the correct timezone for the machine
- Unset the default root password just in case
- Create a non-root user and allowing it to sudo
- Install essential system utilities that you'll love
- Performing a full APT update / upgrade / dist-upgrade / autoremove
[log in as root on your target machine]
apt update
apt install git
git clone https://github.com/openspace42/inception
bash inception/setup