# imagehost-setup

A single-script installer that turns a fresh AlmaLinux 10 VPS into a
lightweight, secure image host — SFTP upload, Nginx serving, optional
Let's Encrypt SSL, and fail2ban out of the box.

## Requirements

- A fresh AlmaLinux 10 VPS
- Root or sudo access

## Usage

Download and run the script:

    curl -O https://git.castlehollow.com/youruser/imagehost-setup/raw/branch/main/imagehost-setup.sh
    sudo bash imagehost-setup.sh

The script will walk you through the rest interactively.

## What it sets up

- **Nginx** — serves image files only (JPG, PNG, GIF, WebP, AVIF, SVG, BMP, TIFF)
- **SFTP chroot** — a locked-down upload user with no shell access
- **firewalld** — opens only SSH, HTTP, and HTTPS
- **fail2ban** — brute-force protection on SSH and Nginx
- **Let's Encrypt SSL** — optional, with HTTP fallback

## License

MIT