Blockchain Node SRE Setup

This repository documents the end-to-end setup of a secured Linux server and preparation for running a blockchain node with an SRE mindset. The focus is on operational correctness, security hygiene, and reliability, not on tutorial-style command dumping.

The documentation is split into topic-wise runbooks, each aligned with a short recorded video and written for fast skimming by recruiters and engineers.

---

Documentation Index

Phase_1: (Local Mashine Setup)

1. Droplet Creation & SSH Access
2. Basic System Checks
3. User & Group Management
4. SSHD Hardening
5. Firewall Configuration (UFW)
6. Fail2Ban Setup
7. Unattended Security Upgrades

Phase_2: Geth Setup (Host Version test)

8. Geth Installation.
9. Geth Auto Starting
10. Service Reliability
11. Network Validation
12. Debuging & Problems
13. Runtime Observation

---

“I initially used host networking for rapid testing. After validation, redesigned into an isolated container network for security and production readiness.”

Phase_3: (Podman Version)

Scope & Intent

• Cloud provider: DigitalOcean
• OS: Ubuntu 24.04 LTS
• Access model: SSH key–only
• Philosophy: minimal surface area, explicit security controls, observable system state

This documentation intentionally explains why decisions were made, not just what commands were executed.

---

What This Is (and Is Not)

This is:

• A real infrastructure setup suitable for long-running services
• Aligned with SRE expectations (security, observability, operability)
• Honest and reproducible

This is not:

• A production-scale or high-availability deployment
• Kubernetes-based orchestration
• A blockchain protocol deep dive

---