All Recipes

Configures fail2ban to protect against SSH brute force attacks, malicious bots, rate limit abuse, and vulnerability scanners. Run on load balancers or standalone web servers that receive direct int...

#!/bin/bash
set -e

# Ensure script is run as root

Sets up Libreoffice in the VM to make soffice command available. It can be used for various office file conversions.

# Ensure the package list is up-to-date
echo "Updating package list..."
sudo apt-get update -y

Install imagick & imagick from pecl & connection the extension

#!/bin/bash

if [ "$EUID" -ne 0 ]
  then echo "Please run as root"

A remote code execution vulnerability was discovered late 2024 that potentially makes Craft sites vulnerable to remote code execution attacks (CVE-2024-56145). This solution is suggested by the ...

#!/usr/bin/env bash

# ============================================================================
# Title: Forge CraftCMS RCE Patch

Hardens Nginx and Optimises Nginx SSL. Pretty much automates this guide > https://beguier.eu/nicolas/articles/nginx-tls-security-configuration.html

#!/usr/bin/env bash

# Ensure the script is run as root
if [ "$EUID" -ne 0 ]; then 

Find the default site and remove all code from the index.html so that when visiting the servers IP address, it no longer displays a Laravel Forge welcome page.

#!/usr/bin/env bash

# Check if running as root
if [[ $EUID -ne 0 ]]; then

This script will loop through the php-fpm php.ini files for all installed PHP versions and replace the settings with the ones defined in this file. Just update the replacers[] array and run.

#!/usr/bin/env bash

declare -A replacers

ClamAV® is an open source antivirus engine for detecting trojans, viruses, malware & other malicious threats.

# install ClamAV
sudo apt-get -y --force-yes install clamav clamav-daemon

# Configure

Install "bashtop" (https://github.com/aristocratos/bashtop) - a small resource monitor and alternative to the more popular "htop". Run this command as the root user.

# Install "bashtop" (https://github.com/aristocratos/bashtop)
# Author: Rob Allport for https://www.f9web.co.uk
# https://github.com/ultrono

For Ubuntu 20.04 LTS (focal), install wkhtmltopdf 12.6.0 (see https://wkhtmltopdf.org). The script downloads the binary from the official GitHub repository, installs it and then deletes the origina...

# Install wkhtmltopdf 12.6.0 (Focal / Ubuntu 20.04 LTS)
# Author: Rob Allport for https://www.f9web.co.uk
# https://github.com/ultrono

Install imagick & imagick from pecl & connection the extension

#!/bin/bash

if [ "$EUID" -ne 0 ]
  then echo "Please run as root"