set -euo pipefail

if [ "$EUID" -ne 0 ]; then

echo "Run as root."

exit 1

export DEBIAN_FRONTEND=noninteractive

PACKAGES=(sudo vim nano curl wget tree git htop rsync net-tools lm-sensors smartmontools ca-certificates openssh-server ufw fail2ban unattended-upgrades)

DOCKER_PACKAGES=(docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin)

ALL_PACKAGES=("${PACKAGES[@]}" "${DOCKER_PACKAGES[@]}")

apt-get update

apt-get install -y "${PACKAGES[@]}"

install -m 0755 -d /etc/apt/keyrings

curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc

chmod a+r /etc/apt/keyrings/docker.asc

echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null

apt-get update

apt-get install -y "${DOCKER_PACKAGES[@]}"

echo "Installed: ${ALL_PACKAGES[*]}"

ufw allow ssh

ufw --force enable

ufw status verbose

dpkg-reconfigure --priority=low unattended-upgrades