Utilize ao configurar, endurecer ou revisar um servidor em nuvem para auto-hospedagem, incluindo DNS, SSH, firewalls, Nginx, hospedagem de sites estáticos, proxy reverso de uma aplicação, HTTPS com clientes Let's Encrypt ou ACME, redirecionamentos seguros de HTTP para HTTPS, ou ajustes opcionais de rede pós-lançamento como BBR.
Esta habilidade é projetada para desenvolvedores e administradores de sistemas que precisam configurar, endurecer ou auditar servidores Linux em nuvem para auto-hospedagem de forma segura e eficiente. Ela cobre todo o fluxo de trabalho: desde a configuração inicial de DNS e SSH, passando por firewalls (iptables/ufw), instalação e configuração do Nginx para sites estáticos ou como proxy reverso para aplicações web, até a obtenção e renovação de certificados HTTPS com Let's Encrypt ou clientes ACME. A habilidade também lida com redirecionamentos seguros de HTTP para HTTPS e oferece ajustes opcionais de desempenho de rede, como a ativação do algoritmo de controle de congestionamento BBR. É útil em diferentes plataformas de nuvem (AWS, DigitalOcean, Linode, etc.) e com distribuições Linux baseadas em Debian/Ubuntu, fornecendo práticas recomendadas de segurança em cada etapa.
npx skills add https://github.com/xixu-me/skills/tree/main/skills/secure-linux-web-hostingInstalled? Explore more Programação e Desenvolvimento skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →
Utilize ao configurar, endurecer ou revisar um servidor em nuvem para auto-hospedagem, incluindo DNS, SSH, firewalls, Nginx, hospedagem de sites estáticos, proxy reverso de uma aplicação, HTTPS com clientes Let's Encrypt ou ACME, redirecionamentos seguros de HTTP para HTTPS, ou ajustes opcionais de rede pós-lançamento como BBR.
This repo contains 11 individual skills — each has its own dedicated page.
Use when building, debugging, packaging, or publishing browser userscripts for Tampermonkey or ScriptCat, including GM APIs, metadata blocks, permission issues, @match/@grant/@connect setup, ScriptCat background or scheduled scripts, UserConfig blocks, or subscription workflows.
Use when users ask how to write, explain, customize, migrate, secure, or troubleshoot GitHub Actions workflows, workflow syntax, triggers, matrices, runners, reusable workflows, artifacts, caching, secrets, OIDC, deployments, custom actions, or Actions Runner Controller, especially when they need official GitHub documentation, exact links, or docs-grounded YAML guidance.
Use when self-hosting OpenClaw on a cloud server, hardening a remote OpenClaw gateway, choosing between SSH tunneling, Tailscale, or reverse-proxy exposure, or reviewing Podman, pairing, sandboxing, token auth, and tool-permission defaults for a secure personal deployment.
Use when a user wants guidance on starting, contributing to, growing, governing, funding, securing, or sustaining an open source project, or asks about contributor onboarding, community health, maintainer burnout, code of conduct, metrics, legal basics, or open source project adoption.
Use when the user wants to translate a repository README, make a repo multilingual, localize docs, add a language switcher, internationalize the README, or update localized README variants in a GitHub-style repository.
Use when routing Claude Code through a local LiteLLM proxy to GitHub Copilot, reducing direct Anthropic spend, configuring ANTHROPIC_BASE_URL or ANTHROPIC_MODEL overrides, or troubleshooting Copilot proxy setup failures such as model-not-found, no localhost traffic, or GitHub 401/403 auth errors.
Use when users ask to discover, install, list, check, update, remove, back up, restore, sync, or initialize Agent Skills, mention `bunx skills`, `npx skills`, `skills.sh`, or `skills-lock.json`, ask "find a skill for X", or want help extending agent capabilities with installable skills.
Use when the user needs to create, extract, flatten, list, test, install, script, or troubleshoot `tzst` CLI workflows for `.tzst` or `.tar.zst` archives, including compression levels, streaming mode, extraction filters, conflict resolution, JSON output, or standalone binary setup, even if they describe the archive task without naming `tzst`.
Use when work depends on the user's live browser session or visible rendered state rather than static fetches, especially for browser debugging contexts or DevTools-selected elements or requests, logged-in dashboards or CMS flows, localhost apps, forms, uploads, downloads, media inspection, DOM or iframe inspection, Shadow DOM, or browser failures that look like soft 404s, auth walls, anti-bot checks, or rate limits.
Use this skill when the user wants to send or fetch files through an Xdrop server from the terminal, asks to automate encrypted Xdrop share-link workflows, provides an Xdrop `/t/:transferId#k=...` link to download and decrypt locally, or needs Xdrop CLI flags such as `--quiet`, `--json`, `--expires-in`, `--output`, or `--api-url`, even if they do not explicitly mention the skill name.
Use when tasks involve Xget URL rewriting, registry/package/container/API acceleration, integrating Xget into Git, download tools, package managers, container builds, AI SDKs, CI/CD, deployment, self-hosting, or adapting commands and config from the live README `Use Cases` section into files, environments, shells, or base URLs.
Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.
Control Eight Sleep pods (status, temperature, alarms, schedules).
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Create, search, and manage Bear notes via grizzly CLI.
Capture frames or clips from RTSP/ONVIF cameras.
Search GIF providers with CLI/TUI, download results, and extract stills/sheets.