Bootstrap Debian Script

Did you know we have a script that you can run on a fresh Debian 13 server that will take care of most of these items for you? We do!

Check the README for the script at go.f13.io/bootstrap-deb-serv for full details on what it does and how to use it.

Summary

bootstrap-deb-serv.sh is a single script that configures a fresh Debian 13 server with the basics we want on every box: correct timezone, hostname, SSH hardening, an optional non-root sudo user, a firewall, Fail2Ban, Docker, NetBird, and the 1Password CLI — all through an interactive, gum-powered prompt flow.

It only asks questions and shows you a full summary of your answers before it changes anything. Nothing is applied until you confirm.

Get it

Danger

Review the README for the script at go.f13.io/bootstrap-deb-serv prior to running the script.

Download the script, take a look at it, then run it. Don’t pipe it straight into bash — piping curl | bash breaks the interactive prompts because the script’s own stdin gets consumed by the pipe.

curl -fsSLo /root/bootstrap-deb-serv.sh https://src.f13.io/bootstrap-deb-serv.sh
less /root/bootstrap-deb-serv.sh          # optional: review before running
chmod +x /root/bootstrap-deb-serv.sh
/root/bootstrap-deb-serv.sh

The script logs everything it does to /var/log/bootstrap-deb-serv.log.