Stop leaving your Linux servers exposed to automated botnets, credential stuffing, and kernel exploits. Whether you are spinning up a fresh Debian 13 VPS on DigitalOcean/AWS or hardening a Raspberry Pi OS node at home, configuring enterprise-grade security manually takes hours—and one wrong line in sshd_config can lock you out permanently. The Debian Hardening Suite is a bulletproof, production-tested automation utility engineered for system administrators, DevOps engineers, and self-hosters who demand elite security without the configuration headache. 🛡️ What Gets Secured Automatically Dedicated Admin Provisioning: Bypasses hidden default cloud accounts (debian/ubuntu), forces a dedicated sudo-capable user, and enforces interactive password creation with state verification. OpenSSH Lockdown: Moves SSH to a custom port, completely disables root password logins, strips X11 forwarding vulnerabilities, and configures strict key-only authentication. UFW Firewall Engineering: Default-deny incoming policy with selective port allowances and an optional, interactive IPv6 toggle to keep firewall logs clean. Systemd-Backed Fail2ban: Actively monitors your custom SSH port via the systemd journal to instantly ban brute-force attackers. Advanced Kernel & Network Sysctl Hardening: Writes a hardened profile (/etc/sysctl.d/99-security.conf) protecting against IP spoofing, SYN floods, ICMP redirects, and memory exploitation (ASLR, kptr restrictions). Automated Security Updates: Configures unattended upgrades for security patches with automatic reboots disabled so your uptime remains uninterrupted. Zero-Lockout Safety Net: Generates timestamped backups (/var/backups/debian-hardening/) with instant out-of-band rollback commands provided in a gorgeous color-coded completion summary. 🔒 Integrated License Key Security This release includes built-in automated license verification. When executed on your server, the script prompts for your valid Gumroad License Key and securely pings Gumroad's API ([https://api.gumroad.com/v2/licenses/verify](https://api.gumroad.com/v2/licenses/verify)) to ensure authorized usage before any system modifications occur. 📦 What’s Included in Your Download (harden-debian-v1.1.7.zip) harden-debian-amd64 — Compiled, standalone binary for standard x86_64 cloud servers (DigitalOcean, AWS, Linode, Vultr). harden-debian-arm64 — Compiled, standalone binary for ARM64 servers and Raspberry Pi OS. SHA256SUMS — Official checksum verification file. README.md — Comprehensive installation, rollback, and verification documentation. LICENSE.txt — Proprietary commercial end-user license terms. 💰 Choose Your License Tier Standard License ($19): Single-user license for personal servers, home labs, and indie developers. Pro / Team License ($49): Includes client deployment rights for agencies, freelance sysadmins, and teams managing multiple server environments. 🚀 Quick Start Bash unzip harden-debian-v1.1.7.zip cd harden-debian-v1.1.7-release sudo ./harden-debian-amd64