The Systron Initial Server Setup Assistant for AlmaLinux and Rocky Linux asks a dozen questions in the terminal. Answer them here with dropdowns and validation instead of typos — then copy the exact command with every parameter filled in, or share a pre-configured link with your team.
The Systron Initial Server Setup Assistant hardens a fresh AlmaLinux or Rocky Linux server in 25 guided steps — but it needs several values from you: FQDN, timezone, administrator username and email, SSH port and the web server to install. Typing those by hand at each prompt is where mistakes creep in: a wrong timezone, an invalid username, a forgotten SELinux port.
This builder turns every question into a form field with validation and dropdowns (including the full IANA timezone list), then generates the ready-to-paste command with all parameters — plus a shareable URL that pre-fills this page for the next run. Everything is computed in your browser.
Every question the assistant asks — FQDN, timezone, admin account, SSH port, web server, run mode — as validated fields with safe defaults.
The exact download + run command with all --flags filled in. The script still shows each value and lets you confirm interactively.
A URL like ?hostname=...&timezone=Asia/Kolkata that pre-fills this page — perfect for handing a repeatable setup to a colleague.
Review the downloaded script, then run it as root. Lockout-sensitive SSH changes still require explicit confirmation in the terminal.
This page is plain JavaScript in your browser. Nothing you type — hostnames, emails, IPs — is uploaded anywhere. The generated commands download the script from the official Systron GitHub repository.
The Systron Initial Server Setup Assistant (v1.1.1, MIT) runs this sequence on a fresh AlmaLinux or Rocky Linux server. Your answers pre-fill the values used in steps 3–4, 8–9, 11–14, 22 and 24.
--hostname value with hostnamectl--timezone after validating it exists--admin-user with wheel-group sudo--ssh-port change with firewalld + SELinux handling--webserver: Nginx, Apache or OpenLiteSpeed--admin-email on interactive root SSH logins| Your answer | Parameter | Used by the assistant for |
|---|---|---|
| Server FQDN | --hostname | hostnamectl set-hostname — logging, TLS and mail identity |
| Timezone | --timezone | timedatectl set-timezone — logs, cron, TLS validity, databases |
| Admin username | --admin-user | Non-root sudo account in the wheel group; SSH keys copied from root |
| Admin email | --admin-email | Optional root-SSH-login email alerts; shown in the final health report |
| SSH port | --ssh-port | Optional port change with firewalld + SELinux handling; Fail2Ban jail port |
| Web server | --webserver | Installs Nginx, Apache or OpenLiteSpeed (official LiteSpeed repo) |
| Run mode | --mode | step confirms each section; all runs the safe baseline end-to-end |
| Dry run | --dry-run | Prints every command without executing anything — ideal first review |
No — and by design. The command downloads the assistant, makes it executable and runs it with your parameters as defaults. The assistant still displays each value and lets you accept or change it interactively, and lockout-sensitive SSH steps always require explicit confirmation in the terminal.
AlmaLinux 8/9/10 and Rocky Linux 8/9/10. The script verifies the OS from /etc/os-release and exits on anything else. It uses dnf, firewalld, SELinux and systemd throughout.
Only the answers you entered, as query parameters — hostname, timezone, username, email, port, web server, mode and the optional IP. When someone opens that link, this page pre-fills the form from the URL. Nothing is stored on any server; the parameters simply travel inside the link you share.
The dry-run prints every command the assistant would execute — package installs, firewall rules, sshd edits — without changing the server. It is the fastest way to review the full plan, and it is exactly how the assistant itself is designed to be audited.
It reduces automated noise in your logs but is not a security fix on its own — real protection comes from SSH keys, disabling password login, firewalld and Fail2Ban, all of which the assistant sets up. If you do change the port, the assistant handles firewalld and SELinux labels and keeps port 22 open until you verify the new port works.
The generated commands download from the official Systron repository, but you should always review the script before running it with root privileges — the recommended command includes that review step. The assistant is MIT-licensed and its full source is public on GitHub.
Our support team is here to assist you around the clock. Get Expert Help, Anytime.