--- name: server-hardening-mastery description: 'Production server hardening — SSH, fail2ban, UFW/iptables, auditd, kernel tuning, intrusion detection, and compliance' version: 1.0.0 category: devops tags: [security, hardening, ssh, fail2ban, firewal

@mcp.tool() def get_server_status(server_ip: str) -> str: """Get health status of a server.""" import subprocess result = subprocess.run( ["ssh", server_ip, "uptime; df -h / | tail -1"], capture_output=True, text=True, tim

Definitive mastery-level skill for Hermes Agent internals, configuration, and operations. Covers architecture, multi-provider LLM routing, gateway ops, skill authoring, cron/background jobs, memory/hi

Complete mastery of OpenClaw — the open-source AI agent platform. Covers Docker gateway deployment, ClawHub skill ecosystem, browser automation (CamoFox/Patchright/Scrapling), multi-provider LLM confi

Production-grade LEMP/LAMP stack: Nginx/Apache, PHP-FPM, MariaDB/MySQL, SSL/TLS, deployment, monitoring, and security hardening.

Install and configure Hermes WebUI (nesquena/hermes-webui) with nginx reverse proxy, SSL, and password auth.

Pitfalls, examples, and edge cases for Hermes Kanban workers. The lifecycle itself is auto-injected into every worker's system prompt as KANBAN_GUIDANCE (from agent/prompt_builder.py); this skill is w

Production monitoring, observability, and SRE practices — Prometheus, Grafana, Alertmanager, Loki, Jaeger, OpenTelemetry, and incident management

Networking and SSL/TLS mastery — DNS, reverse proxies, TLS termination, CDN tuning, firewall rules, and certificate management

Design scalable distributed systems using structured approaches — load balancing, caching, message queues, databases, and microservices

Infrastructure as Code mastery — Terraform, Pulumi, CloudFormation, and multi-cloud provisioning with state management and GitOps

| Alias | IP | Geo | Camofox Port | SSH Key | Role | |-------|-----|-----|-------------|---------|------| | hkus2 | 82.21.72.61 | US (NY) | 9377 (local) | default | Primary | | hkice1 | 82.22.53.61 | US (HK) | 9377 (local) | default | OpenClaw + Herm

Deploy and maintain the WhatsApp Chat Viewer — a Flask web app that reads Hermes session transcripts and displays them in a WhatsApp Web-like UI. Includes WhatsApp Bridge API integration for group nam