Bootstrap Debian Script¶

Did you know we have a script that you can run on a fresh Debian 13 server that will take care of most of these items for you? We do!

Check the README for the script at 13lab.org/doc/deb/bs for full details on what it does and how to use it.

Summary¶

bootstrap-deb-serv.sh is a single script that configures a fresh Debian 13 server with the basics we want on every box: correct timezone, hostname, SSH hardening, an optional non-root sudo user, a firewall, Fail2Ban, Docker, NetBird, and the 1Password CLI — all through an interactive, gum-powered prompt flow.

It only asks questions and shows you a full summary of your answers before it changes anything. Nothing is applied until you confirm.

Get it¶

Danger

Review the README for the script at 13lab.org/doc/deb/bs prior to running the script.

Download the script, take a look at it, then run it. Don’t pipe it straight into bash — piping curl | bash breaks the interactive prompts because the script’s own stdin gets consumed by the pipe.

curl -fsSLo /root/deb-bootstrap.sh https://git.f13.io/f13-infra/utility-scripts/raw/branch/main/debian/bootstrap-debian-server/bootstrap-deb-serv.sh
less /root/deb-bootstrap.sh
chmod +x /root/deb-bootstrap.sh
/root/deb-bootstrap.sh

The script logs everything it does to /var/log/bootstrap-deb-serv.log.