Befehle

Befehlsreferenz

Alle Befehle hier sind Debian/Ubuntu-basiert. Auf anderen Distros ggf. apt → dnf/pacman ersetzen.

User & SSH

adduser <name>
usermod -aG sudo <name>

Pakete

apt update && apt full-upgrade
apt install <paket>
dpkg-reconfigure -plow unattended-upgrades

Firewall (ufw)

ufw default deny incoming
ufw default allow outgoing
ufw allow 22/tcp
ufw allow 80,443/tcp
ufw enable
ufw status

Systemd

systemctl enable --now <service>
systemctl status <service>
journalctl -u <service> -f

Backups (restic)

restic -r sftp:user@host:/path init
restic -r <repo> backup /home /etc /var
restic -r <repo> snapshots
restic -r <repo> restore <snapshot-id> --target /restore

SSH-Härtung

sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak
sudo sshd -t
sudo systemctl restart sshd

Fail2ban

sudo systemctl enable --now fail2ban
sudo fail2ban-client status sshd

WireGuard (wenn SSH hinter VPN)

sudo apt install wireguard
sudo systemctl enable --now wg-quick@wg0

Restic: Retention + Healthcheck

restic -r <repo> forget --keep-daily 7 --keep-weekly 4 --keep-monthly 6 --prune
restic -r <repo> check
restic -r <repo> unlock

Docker

curl -fsSL https://get.docker.com | sudo sh
sudo usermod -aG docker <user>
docker compose up -d
docker compose ps
docker compose logs --tail=20