SERVOR
Server operationsMonitoringAI copilotRecipesPricingBlogDocsAgent source
Open consoleSign in

Recipe directory

150+ verified server playbooks

Not frozen scripts. Each recipe reads your server first, adapts to what is already there, and proves every step before moving on. Every command is signed by your browser, approved by you, and replayable from the history.

185 recipes17 categoriesRecon → Act → Verify

Every recipe, in order

01Recon

Read-only probes establish what is actually installed, running and listening before anything changes.

02Act

Each command is adapted to the distribution found, classified by risk, signed by your browser and relayed verbatim to the agent.

03Verify

A step only counts as done when its own check passes. The run stops on the first failure, nothing is left half-applied.

Filter by system
Filter by category

185 recipes shown

WEB

Web server

13
  1. nginxnginx web server, started, enabled at boot and verified.caution
  2. CaddyCaddy with automatic HTTPS for a domain.caution
  3. Apache httpdApache web server, started, enabled and verified.caution
  4. HAProxyHAProxy load balancer, started and verified.caution
  5. TraefikTraefik reverse proxy via Docker, with the dashboard and automatic TLS.caution
  6. Nginx Proxy ManagerWeb-UI reverse proxy Nginx Proxy Manager via Docker.caution
  7. Let's Encrypt certificateCertbot + TLS certificate and automatic renewal.caution
  8. PHP-FPMPHP-FPM (choice of version) for nginx/apache.caution
  9. Varnish CacheVarnish HTTP cache in front of a web backend.caution
  10. nginx reverse proxyConfigures nginx as a reverse proxy to a local service (websocket OK).caution
  11. IIS (web server)Internet Information Services role enabled and started.caution
  12. ASP.NET Core Hosting (IIS)The .NET Hosting Bundle to host ASP.NET Core apps behind IIS.caution
  13. nginx (macOS)nginx via Homebrew, started as a service.caution
DB

Database

19
  1. PostgreSQLPostgreSQL (major version of your choice), initialized, started and verified.caution
  2. MySQLMySQL, secured (mysql_secure_installation), started and verified.caution
  3. MariaDBMariaDB, started, enabled and verified.caution
  4. MongoDBMongoDB Community, started, enabled and verified.caution
  5. RabbitMQRabbitMQ message broker with the management plugin.caution
  6. MemcachedMemcached in-memory cache, bound to localhost.safe
  7. ClickHouseClickHouse analytical database, started and verified.caution
  8. SQLiteSQLite + tooling (litestream for replication).safe
  9. InfluxDBInfluxDB time-series database, running on :8086.caution
  10. TimescaleDBTimescaleDB extension on an existing PostgreSQL.caution
  11. Neo4jNeo4j Community graph database.caution
  12. Postgres Backup (cron)Scheduled PostgreSQL dump, compressed and with limited retention.caution
  13. Postgres HardeningHardens PostgreSQL: listen address, pg_hba, SSL. Destructive: alters access.destructive
  14. CockroachDBCockroachDB single-node (dev/single), running as a service.caution
  15. pgBackRestReliable PostgreSQL backups with pgBackRest.caution
  16. PostgreSQL (Windows)PostgreSQL via winget, service started.caution
  17. SQL ServerMicrosoft SQL Server (Developer) via winget, service started.caution
  18. PostgreSQL (macOS)PostgreSQL via Homebrew, service started.caution
  19. Redis (macOS)Redis via Homebrew, service started.caution
CACHE

Cache & queues

04
  1. RedisRedis, with an optional password, started and verified.caution
  2. NATSNATS messaging server (JetStream optional).safe
  3. Mosquitto (MQTT)Mosquitto MQTT broker for IoT.caution
  4. Apache KafkaKafka in KRaft mode (no ZooKeeper) via Docker.caution
OBS

Observability

11
  1. node_exporterPrometheus system metrics exporter, as a service.caution
  2. NetdataNetdata real-time monitoring, on :19999.caution
  3. PrometheusPrometheus (metrics collection), as a service on :9090.caution
  4. GrafanaGrafana (dashboards), as a service on :3000.caution
  5. Grafana LokiLoki log aggregation via Docker, on :3100.caution
  6. Grafana + Prometheus stackGrafana + Prometheus + node_exporter via Docker Compose.caution
  7. cAdvisorcAdvisor container metrics via Docker.safe
  8. GlancesGlances real-time system monitoring (web mode).safe
  9. AlertmanagerPrometheus Alertmanager alert routing via Docker.caution
  10. VectorVector observability pipeline (logs/metrics).safe
  11. Grafana AlloyGrafana Alloy log shipping agent to Loki (successor to Promtail, EOL).safe
SEC

Security

13
  1. Harden SSHDisables root and password login, keeps keys. Destructive: verify your key access first.destructive
  2. fail2banfail2ban with the SSH jail, active and verified.caution
  3. UFW firewallUFW: deny incoming by default, allow SSH + chosen ports. Destructive: keeps SSH open.destructive
  4. Automatic security updatesEnables automatic security updates (unattended-upgrades).caution
  5. CrowdSecCrowdSec collaborative IPS + firewall bouncer.caution
  6. ClamAVClamAV antivirus with an up-to-date signature database.safe
  7. Lynis auditInstalls Lynis and runs a hardening audit (read-only).safe
  8. nftables firewallBaseline nftables firewall. Destructive: applies network rules.destructive
  9. auditdauditd kernel audit log, enabled.caution
  10. SSH 2FA (TOTP)TOTP on SSH via Google Authenticator PAM. Destructive: touches SSH auth.destructive
  11. Secret scanSearches for plaintext secrets in a folder (read-only, report).safe
  12. SSH key rotationReplaces a user's authorized keys. Destructive: SSH access.destructive
  13. Firewall rule (Windows)Opens an inbound port in the Windows firewall. Destructive: network.destructive
DEV

Dev tools

23
  1. Node.jsNode.js (LTS version of your choice) via fnm, for the user.caution
  2. GoThe Go language (version of your choice), in the PATH.safe
  3. BunThe Bun JS runtime, in the PATH.safe
  4. PythonPython (version of your choice) via pyenv, for the user.safe
  5. RustThe Rust toolchain via rustup.safe
  6. DenoThe Deno runtime, installed for the user.safe
  7. Java (Temurin)Temurin JDK (OpenJDK), LTS version of your choice.safe
  8. GitGit installed and verified.safe
  9. PHP CLIPHP CLI (version of your choice) + common extensions.safe
  10. Ruby (rbenv)Ruby via rbenv, version of your choice, for the user.safe
  11. .NET SDKThe .NET SDK (LTS version of your choice).safe
  12. Elixir + ErlangElixir and Erlang/OTP.safe
  13. Build toolchainbuild-essential + common compilers and tools.safe
  14. mise (version management)mise (formerly rtx) to manage runtime versions + direnv.safe
  15. ChocolateyChocolatey package manager (PowerShell bootstrap).caution
  16. Node.js (Windows)Node.js LTS via winget.safe
  17. Python (Windows)Python 3 via winget.safe
  18. Git (Windows)Git for Windows via winget.safe
  19. HomebrewHomebrew package manager (bootstrap).caution
  20. Node.js (macOS)Node.js via Homebrew.safe
  21. Python (macOS)Python 3 via Homebrew.safe
  22. Git (macOS)Git via Homebrew.safe
  23. Xcode Command Line ToolsXcode command line tools (git, clang, make…).caution
CTR

Containers

13
  1. Docker EngineDocker Engine + Compose, service active, hello-world verified.caution
  2. Docker ComposeDocker Compose v2 plugin, verified.safe
  3. PodmanPodman (rootless containers), verified.caution
  4. PortainerPortainer Docker management web UI.caution
  5. k3s (lightweight Kubernetes)Single-node k3s cluster. Destructive: configures networking and a container runtime.destructive
  6. WatchtowerAutomatic updates for Docker containers.caution
  7. Private Docker registryPrivate Docker image registry via Docker.caution
  8. Docker cleanup (cron)Scheduled prune of unused Docker images/volumes.caution
  9. DockgeDockge Docker Compose stack manager.caution
  10. HashiCorp NomadNomad orchestrator in single-node mode (server+client). Destructive: networking.destructive
  11. Docker Desktop (Windows)Docker Desktop via winget. Destructive: enables WSL2/Hyper-V, reboot likely.destructive
  12. Hyper-VEnables the Hyper-V role. Destructive: virtualization, reboot required.destructive
  13. Docker (macOS)Docker Desktop via Homebrew Cask.caution
SYS

System

16
  1. TimezoneSets the server timezone.safe
  2. CockpitCockpit web administration console, on :9090.caution
  3. Zsh + Oh My ZshZsh with Oh My Zsh for the current user.caution
  4. Synchronized clock (chrony)NTP synchronization via chrony.safe
  5. User + sudoCreates a user with SSH key and sudo access. Destructive: system account.destructive
  6. Log rotationConfigures logrotate for an application log folder.safe
  7. Disk cleanupPurges apt caches, old logs and orphaned packages (report first).caution
  8. System updateUpdates all packages. Destructive: may require a reboot.destructive
  9. HostnameSets the hostname and updates /etc/hosts.caution
  10. LocaleConfigures the system locale.safe
  11. Login banner (MOTD)Installs a custom MOTD banner.safe
  12. sysctl tuningAdjusts network/file limits. Destructive: kernel parameters.destructive
  13. OpenSSH ServerEnables the OpenSSH server built into Windows. Destructive: remote access.destructive
  14. Remote Desktop (RDP)Enables RDP and the firewall rule. Destructive: opens remote access.destructive
  15. Windows UpdateInstalls pending Windows updates. Destructive: reboot likely.destructive
  16. Active Directory (domain controller)Promotes the server to a domain controller (new forest). VERY destructive.destructive
NET

Networking

09
  1. TailscaleTailscale mesh VPN (requires an auth key to connect).caution
  2. WireGuardWireGuard VPN: generates keys, configures an interface. Destructive: touches the network.destructive
  3. Pi-holePi-hole (DNS + ad blocking). Destructive: changes the DNS resolver.destructive
  4. AdGuard HomeAdGuard Home filtering DNS. Destructive: may take over port 53.destructive
  5. OpenVPNOpenVPN server via the road-warrior script. Destructive: network.destructive
  6. DNS resolver (Unbound)Unbound recursive DNS resolver, on localhost.caution
  7. Network toolsiperf3, mtr, speedtest and network diagnostic tools.safe
  8. frp tunnelfrp client to expose a local service via a remote frp server.caution
  9. HeadscaleHeadscale self-hosted Tailscale control plane.caution
GAME

Game servers

09
  1. Minecraft Server (Java)Configurable Java Minecraft server (version, type, players, RAM), as a systemd service.caution
  2. Valheim ServerDedicated Valheim game server via Docker.caution
  3. Factorio ServerDedicated Factorio game server via Docker.caution
  4. Mumble ServerMumble (murmur) voice server, started and verified.caution
  5. Minecraft Bedrock ServerDedicated Minecraft Bedrock server via Docker.caution
  6. Terraria ServerDedicated Terraria (TShock) game server via Docker.caution
  7. Palworld ServerDedicated Palworld game server via Docker.caution
  8. CS2 ServerDedicated Counter-Strike 2 server via Docker (SteamCMD).caution
  9. ARK ServerDedicated ARK: Survival server via Docker.caution
HOST

Self-hosted

17
  1. VaultwardenVaultwarden password manager (Bitwarden-compatible) via Docker.caution
  2. GiteaLightweight Git forge Gitea via Docker.caution
  3. Uptime KumaSelf-hosted uptime monitoring Uptime Kuma via Docker.caution
  4. NextcloudNextcloud (self-hosted file cloud) via Docker.caution
  5. JellyfinJellyfin media server via Docker, on :8096.caution
  6. n8nn8n workflow automation via Docker.caution
  7. ImmichSelf-hosted photo gallery Immich via Docker Compose.caution
  8. Plex Media ServerPlex media server via Docker.caution
  9. Home AssistantHome Assistant Container home automation via Docker.caution
  10. Paperless-ngxPaperless-ngx document management via Docker Compose.caution
  11. Wiki.jsModern wiki Wiki.js via Docker.caution
  12. MetabaseMetabase BI tool via Docker.caution
  13. Umami AnalyticsPrivacy-friendly analytics Umami via Docker Compose.caution
  14. Homepage (dashboard)Homepage services dashboard via Docker.safe
  15. FreshRSSFreshRSS RSS aggregator via Docker.safe
  16. SyncthingSyncthing P2P file synchronization.caution
  17. CoolifySelf-hosted PaaS Coolify (Heroku/Vercel-style app deployment).destructive
MAIL

Mail

04
  1. SMTP relay (Postfix)Postfix as an outbound relay (satellite) via a smarthost. Destructive: reconfigures mail delivery.destructive
  2. Dovecot IMAPDovecot IMAP/POP3 server.caution
  3. RspamdRspamd anti-spam filter + Redis.caution
  4. ListmonkListmonk newsletter management via Docker Compose.caution
STOR

Storage & backup

10
  1. Swap fileCreates a persistent swap file of the chosen size. Destructive: modifies /etc/fstab.destructive
  2. restic backupsrestic + a scheduled backup of a folder to a target (encrypted).caution
  3. MinIOS3-compatible object storage MinIO via Docker.caution
  4. Samba shareSamba file server (SMB). Destructive: creates a share and a user.destructive
  5. Borg backupsBorgBackup + a scheduled encrypted backup of a folder.caution
  6. rclonerclone to sync to the cloud (S3, B2, Drive...).safe
  7. NFS serverNFS share. Destructive: exposes a folder on the network.destructive
  8. Disk mount (fstab)Formats and mounts a disk persistently. Destructive: potential ERASE.destructive
  9. ZFS poolInstalls ZFS and creates a pool. Destructive: ERASES the disks.destructive
  10. SMB file shareCreates a Windows SMB share. Destructive: exposes a folder on the network.destructive
CI

CI/CD

09
  1. GitHub Actions RunnerSelf-hosted GitHub Actions runner, registered as a service.caution
  2. GitLab RunnerGitLab Runner registered with the Docker/shell executor.caution
  3. Woodpecker CILightweight Woodpecker CI (server) via Docker.caution
  4. Ansible (control node)Ansible installed as a control node.safe
  5. systemd serviceDaemonize a command into a managed systemd service.caution
  6. Scheduled task (cron)Add a scheduled task via a systemd timer.caution
  7. Scheduled task (Windows)Registers a Windows scheduled task.caution
  8. launchd Service (macOS)Daemonizes a command via a macOS LaunchDaemon. Destructive: system service.destructive
  9. GitHub Actions Runner (macOS)Self-hosted GitHub Actions runner for Apple builds.caution
AI

AI / ML

07
  1. OllamaOllama to run local LLMs (optional model pull).caution
  2. JupyterLabJupyterLab via Docker, with an access token.caution
  3. Open WebUIOpen WebUI, a web interface for LLMs (Ollama) via Docker.caution
  4. NVIDIA drivers + CUDANVIDIA drivers and CUDA toolkit. Destructive: kernel modules, reboot likely.destructive
  5. ComfyUI (Stable Diffusion)ComfyUI for image generation via Docker (GPU recommended).caution
  6. vLLM inference servervLLM to serve an LLM through an OpenAI-compatible API. GPU required.destructive
  7. Ollama (macOS)Local LLMs with Ollama via Homebrew (Metal-accelerated).caution
CMS

Web & CMS

07
  1. Deploy a Docker Compose appDeploys a (provided) Docker Compose stack and exposes it. Describe your needs in the instructions.caution
  2. WordPressWordPress via Docker (app + MariaDB), ready to configure.caution
  3. GhostGhost blogging platform via Docker.caution
  4. OdooOdoo Community ERP via Docker (app + Postgres).caution
  5. DiscourseDiscourse forum (official install). Destructive: takes 80/443.destructive
  6. MattermostMattermost team messaging via Docker Compose.caution
  7. DirectusDirectus headless CMS via Docker.caution
MISC

Cross-cutting

01
  1. Homebrew PackageInstalls a Homebrew package (formula) of your choice.caution

Go further