🛡️ Server Hardening Checklist

Interactive Linux server security hardening checklist in your terminal. Walk through 50+ security checks across 9 categories and get a security grade for your server.

Quick Start

npx server-hardening-checklist

Features

• 🛡️ 50+ security checks across 9 categories
• 🔑 SSH Hardening — root login, key auth, port, timeouts
• 🛡️ Firewall — iptables/ufw, default deny, SYN flood protection
• 👤 User Management — passwords, sudo, umask, PAM
• 📦 System Updates — auto-updates, kernel, package cleanup
• 📂 File System — permissions, SUID/SGID, /tmp hardening
• 🌐 Network — IP forwarding, ICMP, source routing
• 📊 Logging & Auditing — auditd, fail2ban, log rotation
• ⚙️ Services — disable unnecessary, check listeners
• 🕸️ Web Server — headers, TLS, directory listing, rate limiting
• 🏆 Security grade (A-F) based on your responses
• ⚠️ Critical item tracking — never miss important fixes
• 🔧 Check commands — exact commands to verify each item
• 🚀 Zero dependencies

Audit Modes

| Mode | Description | |------|-------------| | Full Audit | All 50+ items across all sections | | Critical Only | Only critical/must-do items | | By Section | Focus on one category at a time | | View Commands | See all check commands (no interaction) |

Priority Levels

• 🔴 CRITICAL — Must fix immediately, major security risk
• 🟡 RECOMMENDED — Should implement, significant improvement
• ⚪ OPTIONAL — Nice to have, depends on use case

Who Is This For?

• 🖥️ System administrators hardening production servers
• 🔍 Security auditors performing baseline checks
• 🎓 Students learning server security best practices
• 💼 DevOps engineers setting up new servers

More Tools

• 🐧 npx dargslan-linux-quiz — Linux Quiz
• ⚙️ npx dargslan-sysadmin-quiz — SysAdmin Quiz
• 🐳 npx dargslan-devops-quiz — DevOps Quiz
• 🔒 npx dargslan-security-quiz — Security Quiz
• 📖 npx linux-cheatsheet-cli — Command Reference

Learn More

• 📚 210+ IT eBooks
• 📄 260+ Cheat Sheets
• 📝 IT Blog

License

MIT — dargslan.com