step implementing maintanance logic

doc/setup.md

@@ -0,0 +1,60 @@
+
+```sh
+# install docker
+sudo apt install ca-certificates curl -y
+# Add Docker's official GPG key:
+sudo apt update
+sudo apt install ca-certificates curl
+sudo install -m 0755 -d /etc/apt/keyrings
+sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
+sudo chmod a+r /etc/apt/keyrings/docker.asc
+# Add the repository to Apt sources:
+sudo tee /etc/apt/sources.list.d/docker.sources <<EOF
+Types: deb
+URIs: https://download.docker.com/linux/ubuntu
+Suites: $(. /etc/os-release && echo "${UBUNTU_CODENAME:-$VERSION_CODENAME}")
+Components: stable
+Architectures: $(dpkg --print-architecture)
+Signed-By: /etc/apt/keyrings/docker.asc
+EOF
+# install and test
+sudo apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
+sudo systemctl status docker
+sudo docker run hello-world
+sudo usermod -aG docker $USER
+newgrp docker
+docker run hello-world
+```
+
+```sh
+sudo apt install ufw -y
+sudo ufw default deny incoming
+sudo ufw default allow outgoing
+sudo ufw allow ssh
+sudo ufw enable
+sudo ufw allow ssh
+sudo ufw status verbose
+sudo nano /etc/ssh/sshd_config
+sudo systemctl restart ssh
+sudo ufw allow 80/tcp
+sudo ufw allow 8080/tcp
+sudo ufw allow 1883/tcp # mqtt
+sudo ufw allow 9001/tcp # mqtt ws
+sudo ufw allow 8883/tcp # secure mqtt
+sudo ufw allow 2222/tcp # secure mqtt
+```
+
+```sh
+mkdir -p ~/mosquitto/config
+mkdir -p ~/mosquitto/data
+mkdir -p ~/mosquitto/log
+nano ~/mosquitto/config/mosquitto.conf
+nano ~/mosquitto/docker-compose.yml
+docker compose up -d
+```
+todo add also config files
+
+```sh
+docker load <~/my-vite-app.tar.gz
+docker images
+```