my_sysadmin_scripts

What this is

A collection of system administration scripts for provisioning, configuring, and maintaining infrastructure nodes. These scripts automate repetitive operational tasks such as SSH configuration and server updates, ensuring consistent and idempotent setup across machines.

What this repository contains

• scripts/ssh_config_kristof.sh — Idempotent SSH client configuration script

  • Creates ~/.ssh/config if it doesn't exist
  • Adds Kristof servers (kristof1–kristof7) and OVH hero servers (hero-a through hero-d)
  • Skips any hosts that are already configured

• scripts/update_install.sh — Ubuntu server bootstrap and hardening script

  • Updates and upgrades system packages
  • Installs mc and curl
  • Configures root SSH access with authorized keys
  • Enables UFW firewall (SSH and HTTPS only)
  • Restarts SSH service

Setup SSH Configuration

Run the setup script directly:

curl -fsSL https://forge.ourworld.tf/geomind_code/sysadmin_scripts_public/raw/branch/main/scripts/ssh_config_kristof.sh | bash

After running, you can SSH into any server:

ssh hero-a-expire-may
ssh hero-b-expire-may
ssh kristof1
# etc.

Server Update and Installation

To update and configure servers, run:

curl -fsSL https://forge.ourworld.tf/geomind_code/sysadmin_scripts_public/raw/branch/main/scripts/update_install.sh | bash

This script handles server updates and dependencies installation. It is designed for Ubuntu and must be run as root (will auto-escalate via sudo if needed).

Role in the stack

These scripts provide operational tooling for the Mycelium infrastructure, simplifying node onboarding, SSH access management, and baseline security configuration across the deployment fleet.

Relation to ThreeFold

This technology is used within the ThreeFold ecosystem and was first deployed on the ThreeFold Grid. The component itself is designed as reusable infrastructure technology and should be understood by its technical function first, independent of any specific deployment.

Ownership

This repository is owned and maintained by TF-Tech NV, a Belgian company responsible for the development and maintenance of this technology.

License

This project is licensed under the Apache License 2.0 — see the LICENSE file for details.