VPS-Harden, an Idempotent Bash Script to Harden Ubuntu VPS
If you manage small VPSes this removes the usual nail-biting: every change is previewed, the script is idempotent, and SSH edits come with automatic lockout rollback. It's a single-file, zero-deps tool with 14 modular steps (firewall, fail2ban, kernel tuning, auditd, SOPS support) and CI/ShellCheck badges — great for one-off servers, but not a fleet management replacement for Ansible or cloud-init.