linux-monitoring-setup

Generates a complete Linux server hardening plan with ready-to-apply scripts and configs covering SSH, firewall, fail2ban, sysctl, auditd, and user security.

Generates a complete user story document with acceptance criteria and priorities from requirements/vision.md or any software description.

Creates root-level project config files (package.json, tsconfig.json, pom.xml, .gitignore etc.) from tech-stack.yaml.

Generates production-ready code for selected use cases (UC-01, US-03, all MVP) from tech-stack.yaml and use-cases.md — writes files directly into workspace root.

Audits Linux config files (nginx, Apache, sshd, systemd units, iptables, nftables, fail2ban, sudoers, sysctl, pg_hba.conf, my.cnf, redis.conf) for security issues, misconfigurations, and performance gaps.

Profiles a Linux system and generates tuned sysctl, CPU governor, I/O scheduler, and workload-specific configs for web, database, networking, HPC, or general workloads.

Scaffolds a complete project from tech-stack.yaml into the workspace root — root configs, source structure, database files, Docker, and UI foundation in one command.

Generates production-ready bash scripts for any Linux task from a plain English description — backups, monitoring, deployment, cron jobs, health checks, database maintenance.

Diagnoses and fixes SELinux denials — file context relabeling, boolean toggles, port labeling, and custom policy modules. Never suggests disabling SELinux.

Manages this skill shop – lists all skills, recommends the right one for any task, and creates new skills on demand.