Code Quest

spell_editor.py

# 1. Create user
sudo useradd -m paladin
sudo usermod -aG sudo paladin

# 2. SSH keys
ssh-keygen -t rsa -b 4096 -f ~/.ssh/paladin_key -N ""
cat ~/.ssh/paladin_key.pub >> /home/paladin/.ssh/authorized_keys
chmod 700 /home/paladin/.ssh
chmod 600 /home/paladin/.ssh/authorized_keys

# 3. Harden SSH
# Port 2222
# PasswordAuthentication no
# PermitRootLogin no
sudo systemctl restart sshd

# 4. Firewall
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow 2222/tcp
sudo ufw allow 80/tcp
sudo ufw enable

# 5. Fail2ban
sudo apt install fail2ban -y
# [sshd]
# enabled = true
# maxretry = 3
# bantime = 900
sudo systemctl enable --now fail2ban

# 6. Cron
# 0 3 * * * /usr/local/bin/log-rotate.sh

# 7. Verify
sudo ufw status
sudo fail2ban-client status sshd
sudo systemctl status sshd
crontab -l