apt update)apt upgrade -y)settings.confsudo groupsecurity_manager account with sudo privilegesInstalls all basic software packages (e.g., curl, vim, git)
Installs role-based software depending on SERVER_ROLE
Example:
prod → nginx, dockerdev → nodejs, python3Logs each installation step
Sets default firewall rules:
Opens allowed ports from settings.conf
Enables UFW firewall
Logs all applied rules
Installs WireGuard VPN
Generates:
Prepares system for VPN configuration
Logs key generation
ubuntu accountDisplays contents of settings.conf
Helps verify:
Read-only (no execution)