Flagship Products
Full systems, audits, and bundles. The workhorses.
Security Hardening Scripts
12 bash scripts that take a default Ubuntu/Debian/Proxmox server to a hardened production state, with a 0-100 security audit. CIS-benchmark-aligned, with rollback. The flagship product.
Acquire →
Security + Proxmox Bundle
The two products every Proxmox homelab needs, bundled. 12 security scripts + 5 LXC templates. ~15 minutes from clean Proxmox install to a secured environment.
Acquire →
Proxmox LXC Starter Templates
Five LXC container templates built from official Proxmox base images, run through security hardening, exported as reusable templates. Includes install.sh.
Acquire →
Media Server Stack
Production-tested Docker Compose stack. Plex, Sonarr, Radarr, Tdarr, qBittorrent, Prowlarr, Overseerr, Bazarr — 12 services pinned to working versions, one config file.
Acquire →Single-Purpose Scripts
Bite-sized sysadmin tools. Each does one thing, does it well, costs less than a coffee.
Proxmox Backup Verify Cron
Daily cron job. Checks your most recent vzdump backup, emails you if backups are stale or corrupted. 5-minute install.
Acquire →
Docker Log Rotation Daemon
Prevents the "disk filled by container logs at 3am" outage. Configures Docker log rotation by size + installs weekly cleanup cron.
Acquire →
ZFS Snapshot Rotation
Idempotent bash script. Hourly/daily/weekly/monthly snapshots across multiple datasets, prunes to configurable retention. Multi-dataset support.
Acquire →
Postgres Backup + S3
Daily pg_dump, age-encrypted, uploaded to S3-compatible storage. Auto-prunes old backups. AWS / Backblaze B2 / MinIO / Wasabi.
Acquire →
WireGuard Mesh Generator
Generate complete WireGuard configs for a full mesh network from a simple nodes.txt file. Auto key generation, IP allocation, peer block wiring.
Acquire →
Nginx Hardening Snippets
Four drop-in /etc/nginx/snippets/ files: security headers, modern TLS, rate limiting, reverse proxy params. Tested on nginx 1.18+.
Acquire →
SSH Hardened sshd_config
Drop-in sshd_config. Key-only auth, no root, modern crypto, no forwarding, session limits, verbose logging. Ubuntu/Debian/RHEL tested.
Acquire →
HA Auto-Update Watcher
Home Assistant shell_command. Polls for new core releases, notifies via Slack and/or persistent notification. Optional auto-apply.
Acquire →Web Tools
Hosted SaaS for makers who don't want to install anything.
Ghostprint
Invisible fingerprinting for 3D prints. Drag-drop an STL, get back a tagged STL + manifest. L1 (G-code micro-watermark) + L2 (STL steganography). Prove provenance, defeat counterfeits.
- Free CLI (MIT, run locally, forever)
- Maker: $9/mo — 500 hosted tags/mo
- Studio: $49/mo — unlimited tags + API
- Round-trip verified: 19/19 tests
Sanitized
No IPs, hostnames, paths, or credentials from production. Generic and safe to deploy anywhere.
30-Day Refund
If it doesn't run cleanly on a supported OS, refund. No questions asked.
MIT Licensed
Personal use: free to use across unlimited servers. Commercial license available for client work.
Email Support
support@theapk.com. 48-hour response on personal, 24-hour on commercial. Real human, not a bot.