Wrote a playbook for friends who want their own website on their own domain, served from a computer in their house.

Numbered scripts turn a spare machine into a hardened headless Ubuntu or Debian server. Key-only SSH, firewall, fail2ban, kernel hardening, and it patches and reboots itself. nginx serves the site on loopback and a Cloudflare Tunnel dials out, so nothing on the router is open and visitors never learn your home IP. The domain comes from Cloudflare Registrar at cost. One command deploys, rolls back on its own if the new build is broken, and proves the live site is the version you just shipped.

Open the folder in Claude Code and say set me up. Seven agents split the work, with Matrix names like mine. Tank builds and hardens the server, Merovingian finds and buys the domain and asks before every Cloudflare call, Trainman handles the tunnel and DNS.

The pre-publish review found lockout risks and money risks, and every fix landed with a test. The firewall refuses a LAN range that would cut off your current SSH session. SSH hardening arms a revert timer before it restarts sshd. Domain purchase refuses an unknown price and a domain you already own.

None of it has run on real hardware yet. The first friend who tries it is the live test.