dernbu/servers
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
6 commits 1 branch 0 tags 88 KiB
  • Shell 58%
  • HCL 18.6%
  • Dockerfile 15.7%
  • Makefile 7.7%
Find a file
Exact
Kim Yongbeom 26906cb595 feat: move forgejo to git.yongbeom.com
2026-05-17 19:41:25 +08:00
caddy feat: remove nextcloud 2026-05-17 17:56:13 +08:00
docs refactor: update environment variable names for R2 compatibility across services 2026-05-17 18:34:08 +08:00
etc/ssh 2026-05-17 17:04:45 +08:00
forgejo feat: move forgejo to git.yongbeom.com 2026-05-17 19:41:25 +08:00
immich refactor: update environment variable names for R2 compatibility across services 2026-05-17 18:34:08 +08:00
linkwarden feat: remove linkwarden 2026-05-17 17:36:54 +08:00
offline-notion@21326cd93a feat: remove linkwarden 2026-05-17 17:36:54 +08:00
openbao refactor: update environment variable names for R2 compatibility across services 2026-05-17 18:34:08 +08:00
outline refactor: update environment variable names for R2 compatibility across services 2026-05-17 18:34:08 +08:00
tofu-infra feat: move forgejo to git.yongbeom.com 2026-05-17 19:41:25 +08:00
vaultwarden refactor: update environment variable names for R2 compatibility across services 2026-05-17 18:34:08 +08:00
.env.example refactor: update environment variable names for R2 compatibility across services 2026-05-17 18:34:08 +08:00
.gitignore 2026-05-17 17:04:45 +08:00
ARCHITECTURE.md feat: remove nextcloud 2026-05-17 17:56:13 +08:00
ARCHITECTURE.puml feat: remove nextcloud 2026-05-17 17:56:13 +08:00
BACKUPS.md refactor: update environment variable names for R2 compatibility across services 2026-05-17 18:34:08 +08:00
docker-compose.yaml feat: remove nextcloud 2026-05-17 17:56:13 +08:00
Makefile feat: remove nextcloud 2026-05-17 17:56:13 +08:00
README.md feat: remove nextcloud 2026-05-17 17:56:13 +08:00
source.sh 2026-05-17 17:04:45 +08:00

README.md

Hetzner Auction Ubuntu 24.04 Server

Config and helpers for a Hetzner auction server running Ubuntu 24.04.

See all the services @ ARCHITECTURE.md.

Set Up

1. SSH config: /etc/ssh/sshd_config

This is a hardened OpenSSH server config. It:

  • Disables root SSH: PermitRootLogin no
  • Key-only auth: password and keyboard-interactive are off; only PubkeyAuthentication is used
  • Restricts login: AllowUsers server
  • Keeps PAM for account/session handling
  • Disables X11 forwarding because I don't need it and ChatGPT suggested it

Services

From the Internet

Service Port Subdomain
Vaultwarden 2407 pw.yongbeom.net
OpenBao 2408 bao.yongbeom.net
Immich 2409 photos.yongbeom.net
Forgejo 2410 git.yongbeom.net
Forgejo SSH 222 git@git.yongbeom.net (SSH)

Mine

Service Port Subdomain
Offline Notion (TODO) 3404 notion.yongbeom.net
Lobster 3405 lobster.yongbeom.net

Senpailearn

Service Port Subdomain
Hydragen (V2) (TODO) 3504 hydragen.senpailearn.com

Service removal runbooks: