rewrite to debian

bootstrap.sh

@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+echo "== Updating system =="
+apt update
+apt upgrade -y
+
+echo "== Installing base packages =="
+apt install -y \
+  ca-certificates \
+  curl \
+  gnupg \
+  git \
+  vim \
+  htop \
+  unzip \
+  rsync \
+  jq \
+  ufw
+
+echo "== Installing Docker repository key =="
+install -m 0755 -d /etc/apt/keyrings
+
+curl -fsSL https://download.docker.com/linux/debian/gpg \
+  -o /etc/apt/keyrings/docker.asc
+
+chmod a+r /etc/apt/keyrings/docker.asc
+
+echo "== Adding Docker repository =="
+echo \
+  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] \
+  https://download.docker.com/linux/debian \
+  $(. /etc/os-release && echo "$VERSION_CODENAME") stable" \
+  > /etc/apt/sources.list.d/docker.list
+
+apt update
+
+echo "== Installing Docker =="
+apt install -y \
+  docker-ce \
+  docker-ce-cli \
+  containerd.io \
+  docker-buildx-plugin \
+  docker-compose-plugin
+
+systemctl enable docker
+systemctl start docker
+
+echo "== Configuring firewall =="
+ufw default deny incoming
+ufw default allow outgoing
+
+# SSH
+ufw allow 22/tcp
+
+# Web
+ufw allow 80/tcp
+ufw allow 443/tcp
+
+ufw --force enable
+
+echo "== Enabling useful services =="
+systemctl enable --now ssh
+
+echo
+echo "================================"
+echo "Bootstrap finished!"
+echo
+docker --version
+docker compose version
+echo "================================"