Enterprise-grade server security hardening and monitoring toolkit
Transform your Linux servers into impenetrable fortresses with automated security hardening, real-time monitoring, and multi-server deployment capabilities.
# 1. Download and setup
git clone https://github.com/xploz1on/astro-server.git
cd astro-tech
chmod +x astro
# 2. Run it! 🎉
./astroThat's it! Astro Server will show you a beautiful interactive menu. No need to remember commands or profiles!
╔═══════════════════════════════════════════════════════════════╗
║ 🛡️ ASTRO SERVER MENU ║
╚═══════════════════════════════════════════════════════════════╝
Available Operations:
1) 🛡️ Harden Server - Interactive security hardening
2) 📊 Generate Report - Security status report
3) 🚀 Deploy to Multiple - Deploy via Ansible
4) 🔍 System Check - Compatibility verification
5) 🔄 Update Toolkit - Update Astro Server
6) ℹ️ Version Info - Show version details
7) ❓ Help - Show detailed help
0) 🚪 Exit - Exit Astro Server
Quick Profiles:
dev) 💻 Development - VS Code compatible
prod) 🔴 Production - Maximum security
bal) 🟡 Balanced - Asks about VS Code
web) 🌐 Web Server - Web applications
db) 🗄️ Database - Database servers
a) ⚡ Aggressive - High security (legacy)
p) 🔒 Paranoid - Maximum security (legacy)
Enter your choice:
Just type a number or letter and press Enter! 🎉
# Quick hardening with specific profiles
./astro harden --profile development # VS Code compatible development
./astro harden --profile production # Maximum security for production
./astro harden --profile balanced # Asks about VS Code support
./astro harden --profile webserver # Optimized for web applications
./astro harden --profile database # Maximum security for databases
# Generate security report
./astro report
# System compatibility check
./astro check
# Multi-server deployment
./astro deploy --inventory hostsAstro Server includes intelligent VS Code compatibility:
# 🚀 RECOMMENDED: Interactive approach (safest)
./astro
# Choose "1" then select "bal" for balanced profile
# You'll be asked about VS Code support during deployment
# Quick shortcuts for VS Code users
./astro dev # Development profile (always VS Code compatible)
./astro bal # Balanced profile (asks about VS Code)
# For production servers (VS Code disabled by design)
./astro prod # Production profile (maximum security)🛡️ Safety First: Astro Server will never break your SSH connection. All changes are applied safely with:
- Automatic SSH connection verification
- Backup creation before modifications
- Interactive confirmation for risky changes
- Easy rollback capabilities
- ✨ Why Astro Server?
- 🌟 Features
- 🛡️ Security Features
- 🐧 Supported Distributions
- 📚 Documentation & Advanced Usage
- 🎯 Roadmap
- 🤝 Contributing
- 📄 License
- 🆘 Support & Community
- 🎯 One Command Launch - Just run
./astroand you're ready to go! - 🛡️ Enterprise-Grade Protection - Multi-layer security used by Fortune 500 companies
- 📊 Beautiful Reporting - Professional security reports that executives love
- 🤖 Automation Ready - Scale from 1 to 1000+ servers with Ansible
- 🐧 Universal Compatibility - Works across all major Linux distributions
- 🔒 Zero Trust Approach - Assume breach, verify everything
- 📈 Continuous Monitoring - Real-time threat detection and response
- 🎨 Beautiful Interface - No more remembering complex commands or profiles
- 🎯 One-Command Launch - Just run
./astrofor beautiful interactive menu - 🎨 Interactive Security Hardening - Beautiful, colorful CLI interface with guided setup
- 🛡️ Multi-Layer Protection - SSH, Fail2Ban, Firewall, Kernel hardening in one tool
- 📊 Professional Security Reports - Markdown reports with executive summaries and metrics
- 🔄 Ansible Automation - Deploy across multiple servers with infrastructure as code
- 🐧 Multi-Distro Support - Ubuntu, Debian, Fedora, RHEL, Arch Linux support
- 📱 Real-time Monitoring - Continuous security status tracking and alerting
- 🎯 Zero-Config Setup - Smart defaults with expert recommendations
- 🔧 5 Security Profiles - Development, Production, Balanced, Web Server, Database
- 🚀 VS Code Integration - Intelligent remote development support
- 🛡️ Never Breaks SSH - Safe deployment with automatic verification
- 📊 VS Code Compatibility Reports - Know your remote development status
- ❌ Disable root login
- 🔑 Key-based authentication enforcement
- 🚫 Connection attempt limits
- ⏱️ Session timeouts
- 🔒 Protocol restrictions
- 🚨 Fail2Ban with aggressive mode
- 🕐 Configurable ban durations (1h - 1 week)
- 🌐 Real-time IP blocking
- 📊 Attack pattern analysis
- 🛡️ UFW firewall configuration
- 🚪 Smart port management
- 🔒 Default deny policies
- 🌐 Custom service rules
- 🚫 IP forwarding disabled
- 🔒 ICMP protections
- 🛡️ Source routing disabled
- 🎯 Enhanced ASLR
- 📈 Real-time security dashboards
- 📋 Markdown status reports
- 🚨 Attack trend analysis
- 📊 Resource monitoring
- Ubuntu 18.04+ (LTS recommended)
- Debian 10+ (Buster, Bullseye, Bookworm)
- Linux Mint (All versions)
- Pop!_OS (All versions)
- Elementary OS (All versions)
- Fedora 35+
- RHEL/CentOS 8+
- Rocky Linux (All versions)
- AlmaLinux (All versions)
- Oracle Linux (All versions)
- Arch Linux & derivatives (Manjaro, EndeavourOS)
- Alpine Linux
- openSUSE
- macOS - Linux systems only
- Windows - Use WSL for Windows support
# Method 1: Clone from GitHub (Recommended)
git clone https://github.com/xploz1on/astro-server.git
cd astro-tech
chmod +x astro
# Method 2: Download and extract
wget https://github.com/xploz1on/astro-tech/archive/main.zip
unzip main.zip && cd astro-tech-main
chmod +x astro
# Method 3: One-line installer (Coming Soon)
curl -sSL https://get.astro-tech.cloud | bash# 🎯 EASIEST WAY: Use the interactive menu!
./astro
# Then select "Deploy to Multiple" from the menu
# 🚀 COMMAND LINE OPTIONS (for advanced users):
# 1. Install Ansible
sudo apt install ansible # Ubuntu/Debian
sudo dnf install ansible # Fedora/RHEL
# 2. Configure your server inventory
cp ansible/inventory/hosts.example ansible/inventory/hosts
vim ansible/inventory/hosts
# 3. Deploy to all servers
./astro deploy --inventory ansible/inventory/hosts
# 4. Deploy to specific server groups
./astro deploy --limit web-servers
# 5. Generate reports for all servers
./astro deploy --playbook security-reports.yml# 🛡️ Server Security Status Report
## 📊 Executive Summary
| Metric | Status | Value |
|--------|--------|-------|
| **Security Level** | 🟢 **SECURE** | Active monitoring |
| **Failed Login Attempts (24h)** | ✅ | 0 attempts |
| **Currently Banned IPs** | ✅ | 0 IPs blocked |
## 🔒 Security Services Status
✅ SSH hardened with key-only authentication
✅ Fail2Ban active with aggressive monitoring
✅ Firewall configured with minimal attack surface
✅ Kernel hardened against network attacksastro-server/configs/ssh/
├── hardened-sshd.conf # Production SSH config
├── paranoid-sshd.conf # Maximum security
└── development-sshd.conf # Dev-friendly configastro-server/configs/fail2ban/
├── aggressive.conf # High security
├── balanced.conf # Recommended
└── permissive.conf # Light protectionastro-server/configs/firewall/
├── web-server.rules # HTTP/HTTPS services
├── database.rules # Database servers
└── minimal.rules # SSH-only accessastro-server/
├── astro # 🎯 Main launcher script (improved with new profiles)
├── scripts/ # 🔧 Core security scripts
│ ├── Astro-server.sh # Interactive hardening wizard
│ └── security-report.sh # Markdown report generator (VS Code checks)
├── ansible/ # 🤖 Multi-server automation
│ ├── playbooks/ # Deployment playbooks
│ │ └── harden-servers.yml # Main hardening playbook (profile-aware)
│ ├── inventory/ # Server inventories
│ ├── group_vars/ # Profile-based configuration variables
│ │ ├── development.yml # Development profile (VS Code enabled)
│ │ ├── production.yml # Production profile (maximum security)
│ │ ├── balanced.yml # Balanced profile (asks about VS Code)
│ │ ├── database.yml # Database profile (secure DB server)
│ │ ├── webserver.yml # Web server profile (web optimized)
│ │ └── all.yml # Global variables
│ ├── tasks/ # Reusable task files
│ └── templates/ # Jinja2 configuration templates
│ ├── sshd_config.j2 # SSH hardening template (profile-aware)
│ └── jail.local.j2 # Fail2Ban configuration template
├── configs/ # ⚙️ Security templates (legacy)
├── docs/ # 📚 Comprehensive documentation
│ ├── PROFILES.md # Detailed profile documentation
│ ├── INSTALL.md # Installation guide
│ ├── STANDALONE-USAGE.md # Single server usage
│ └── ANSIBLE-USAGE.md # Multi-server deployment
├── LICENSE # 📄 Apache 2.0 License
├── CONTRIBUTING.md # 🤝 Contribution guidelines
└── README.md # 📖 This file (updated with new features)
| Guide | Description | Audience |
|---|---|---|
| 🚀 Quick Start | Get started in 5 minutes | Everyone |
| 📖 Installation Guide | Detailed setup instructions | Administrators |
| 🖥️ Standalone Usage | Single server hardening | System Administrators |
| 🤖 Ansible Usage | Multi-server deployment | DevOps Engineers |
| 🤝 Contributing | How to contribute | Developers |
| 🗺️ Roadmap | Development roadmap | Everyone |
- Interactive security hardening with beautiful CLI
- Professional markdown security reports
- Multi-layer protection (SSH, Fail2Ban, Firewall, Kernel)
- Configuration templates and profiles
- Comprehensive documentation
- Complete Ansible playbook framework
- Multi-server deployment with templates and tasks
- Multi-OS support (Debian/Ubuntu, RedHat/Fedora)
- Environment management (dev/staging/prod)
- Firewall automation (UFW/firewalld)
- Advanced role-based architecture
- Automated report collection
- Fedora/RHEL/CentOS support
- Arch Linux support
- Package manager abstraction
- Distribution-specific optimizations
- Automated compatibility testing
- Container security (Docker/Kubernetes)
- Compliance frameworks (CIS, NIST, PCI DSS)
- SIEM integration (ELK, Splunk)
- Threat intelligence feeds
- Zero Trust architecture
- AWS/Azure/GCP integration
- Web management dashboard
- RESTful API
- Mobile app support
- Commercial licensing
We welcome contributions from security professionals, system administrators, and developers!
| Area | Skills Needed | Impact |
|---|---|---|
| 🐧 Multi-distro support | Linux administration, package management | High |
| 🤖 Ansible development | Ansible, YAML, infrastructure as code | High |
| 🔒 Security research | Security hardening, compliance frameworks | Critical |
| 📊 Monitoring integration | Prometheus, Grafana, ELK Stack | Medium |
| 📝 Documentation | Technical writing, tutorials | High |
| 🧪 Testing | QA, automated testing, CI/CD | Medium |
- Fork the repository
- Create a feature branch (
git checkout -b feature/amazing-feature) - Test your changes thoroughly
- Commit with clear messages (
git commit -m 'Add amazing feature') - Push to your branch (
git push origin feature/amazing-feature) - Open a Pull Request
See CONTRIBUTING.md for detailed guidelines.
This project is licensed under the Apache License 2.0 - see the LICENSE file for details.
- 📖 Documentation: Comprehensive guides in
docs/ - 🐛 Bug Reports: Create an issue
- 💡 Feature Requests: Suggest features
- 💬 Discussions: Community discussions
- Security Issues: Email dp@astro-tech.cloud (do not use public issues)
- Security Advisories: Check GitHub Security Advisories
- Contributors: See GitHub Contributors
- Code of Conduct: We follow the Contributor Covenant
- Discussions: Join our community discussions
After running Astro Server, your infrastructure will achieve:
- 🛡️ Enterprise-grade security posture
- 📊 Continuous threat monitoring
- 🚨 Automated attack prevention
- 📋 Compliance-ready reporting
- 🔄 Scalable security management
Transform your servers into ASTRO-level secure fortresses! 🚀🛡️
Built with ❤️ for the security community