Primus AI Console

System packages may need upgrading. This will install security and bugfix updates; note kernel upgrades or major changes may require a reboot. Run in a maintenance window if uptime is important.

Annehmen

Ablehnen

Gather a short snapshot of disk, memory and docker container status for triage and monitoring setup. Useful before implementing automated alerting or backups.

Annehmen

Ablehnen

Review which services are publicly listening (e.g., ports 22, 25, 80, 443, 9100). Confirm only intended services are exposed and plan to bind internal-only services to localhost if possible.

Annehmen

Ablehnen

There are repeated sudo PAM conversation failures for user 'caddy' and SSH KEX errors in the logs. Inspect sudo/journal entries and SSH logs to determine whether these are misconfigurations or benign connection probes.

Annehmen

Ablehnen

zramswap.service is repeatedly failing. If you don't need zram swap, consider disabling it; otherwise inspect the service unit and journal to identify why it fails to start.

Annehmen

Ablehnen

systemd reported 'Executable name contains special characters' for /etc/systemd/system/prometheus-node-exporter.service.d/override.conf. Inspect the file contents and remove any stray characters or invalid Exec lines before reloading.

Annehmen

Ablehnen

Avahi exposes mDNS/zeroconf on the network which may be undesired on servers. If you do not need local network service discovery, consider disabling it. (Don't run this if you rely on Zeroconf.)

Annehmen

Ablehnen

Docker containers can accumulate large json logs. Consider adding log-opts to /etc/docker/daemon.json (e.g. max-size, max-file) and restarting docker. Test changes carefully since restarting the daemon impacts containers.

Annehmen

Ablehnen

code-server-root.service has failed starts in logs. Inspect the journal to see why and, if appropriate, restart the unit. Restarting may interrupt active sessions.

Annehmen

Ablehnen

Configure systemd-journald to cap SystemMaxUse and RuntimeMaxUse and enable compression. This prevents logs from consuming all disk space on long-running hosts. The change is reversible but restarts journald.

Annehmen

Ablehnen

Monit can watch key processes (Caddy, docker, node services) and restart them or alert when unhealthy. Install and enable it, then add service checks in /etc/monit/monitrc (manual review required before adding checks).

Annehmen

Ablehnen

Set a restart policy on running containers so essential services come back after host reboots. This sets a conservative 'unless-stopped' policy for all currently running containers.

Annehmen

Ablehnen

Avahi is listening on mDNS (5353). If you don't need local service discovery on this server, disabling it reduces exposure and unwanted network chatter.

Annehmen

Ablehnen

This system currently has no swap. If you prefer a traditional swap fallback for memory-pressure situations, create a modest swapfile (2GB example). Review before applying on systems where swap is intentionally disabled.

Annehmen

Ablehnen

If you do not need zram swap, masking the unit prevents repeated failed start attempts and noisy logs. Only do this if you confirmed zram is not required.

Annehmen

Ablehnen

avahi-daemon advertises services via mDNS/Bonjour on the LAN. If you don't need local service discovery, disabling it reduces unnecessary network exposure. Validate impact (local discovery) before applying.

Annehmen

Ablehnen

Your logs show repeated SSH key/kex errors and connection resets. Enabling a conservative Fail2Ban jail for sshd will help auto-block repeated failing connections. Review the file before applying in production.

Annehmen

Ablehnen

Set Docker's json-file log-driver options to limit per-container log size. This change will restart the Docker daemon (containers will be restarted). Marked non-auto because it restarts containers and impacts running services.

Annehmen

Ablehnen