Copy-ready homelab scripts
Tested, accurate scripts for Linux, macOS, and Windows. Click to copy, paste to run.
Security
6 scriptsClamAV Download Scan + Auto-Purge (Docker)
Run ClamAV in a container to scan your download folder, delete executables that masquerade as media, and quarantine infected files on a schedule.
Block SSH brute-force with fail2ban (Linux)
Install fail2ban and configure an SSH jail that auto-bans IPs after repeated failed login attempts. Works on Ubuntu, Debian, Fedora, and openSUSE.
Generate a self-signed TLS certificate (Linux / macOS / Windows)
Create a self-signed TLS certificate and private key with OpenSSL for internal homelab services. Includes Subject Alternative Names so modern browsers accept it.
SSH Server Hardening (Linux)
Disable password auth, lock down SSH to key-only access, change the default port, and restrict user logins. Works on Ubuntu, Debian, Fedora, and openSUSE.
Generate an SSH key pair (Linux / macOS / Windows)
Create an Ed25519 SSH key pair and copy the public key to a remote server. Works identically on Linux, macOS, and Windows 10+ with the built-in OpenSSH client.
UFW Firewall Baseline (Ubuntu / Debian)
Set up a secure default UFW ruleset: deny all inbound, allow SSH and common homelab services. Safe to run on a fresh VPS or LXC container.
Networking
5 scriptsFlush the DNS cache (Linux / macOS / Windows)
Clear the local DNS resolver cache on Linux, macOS, and Windows. Fixes stale DNS records after changing a hostname, IP, or internal DNS entry.
Set a static IP with netplan (Ubuntu / Debian)
Configure a static IP address on Ubuntu or Debian using netplan. Includes a dry-run safety step so you can't accidentally lock yourself out of a remote server.
Install Tailscale on Linux
One-command Tailscale install that works on Ubuntu, Debian, Fedora, openSUSE, Arch, and most other Linux distros. Official install script from Tailscale.
Install Tailscale on macOS
Install Tailscale on macOS via Homebrew or the Mac App Store. Includes subnet routing and exit node setup for homelab access.
Install Tailscale on Windows
Install Tailscale on Windows via winget or the installer. Includes subnet routing, exit node usage, and SSH server setup for remote access.
Infrastructure
2 scriptsInstall Plex Media Server on Debian/Ubuntu
Add Plex's official APT repository, install Plex Media Server, and claim a headless server to your account from the command line.
Proxmox VE Post-Install Hardening
Essential post-install steps for a new Proxmox VE node: remove the subscription nag, switch to the free repo, disable the enterprise repo, update the system, and fix storage.
Containers
3 scriptsArr Stack Docker Compose (Prowlarr, Radarr, Sonarr + VPN)
A complete docker-compose.yml for the *arr stack — Prowlarr, Radarr, Sonarr, and a VPN-shielded qBittorrent — with the single-root layout that makes imports instant hardlinks.
VPN-Shielded Torrent Stack (gluetun + qBittorrent)
Run qBittorrent inside a gluetun VPN container so all torrent traffic exits through a VPN with a kill-switch — plus port-forward sync for full download speed.
Install Docker + Docker Compose on Linux
Install Docker Engine and the Compose plugin on Ubuntu, Debian, or Fedora using Docker's official repository. Adds your user to the docker group so sudo isn't required.
Tools
5 scriptsPlex Transcoder Tuning for Weak CPUs (API)
Tune a headless Plex server's transcoder over the API for low-power hardware: disable broken hardware acceleration, prefer speed, cap concurrent transcodes, and use a RAM temp dir.
Check what's using a port (Linux / macOS / Windows)
Find which process is listening on a given port number on Linux, macOS, or Windows. Essential for diagnosing port conflicts when a service fails to start.
Create a Ventoy USB drive on Linux
Download, verify, and install Ventoy on a USB drive from Linux. Supports BIOS and UEFI. Drop ISOs directly onto the drive — no re-flashing needed between images.
Create a Ventoy USB drive on macOS
Download and install Ventoy onto a USB drive from macOS using the official GUI app. Drop ISO files directly onto the drive — no re-flashing between images.
Create a Ventoy USB drive on Windows
Download and install Ventoy onto a USB drive from Windows using the official GUI installer. Drop ISOs directly onto the drive — no Rufus, no re-flashing.