Complete every item before running setup-server1-full. Each item maps to a known failure mode documented in LESSONS_LEARNED.md.
~/.ssh/xzopia_server1.pub) added to root's authorized keys via the hosting provider dashboard — before first bootrmm.xzopiasecure.com → 213.171.194.170 (A record, TTL propagated)api.xzopiasecure.com → 213.171.194.170 (A record, TTL propagated)mesh.xzopiasecure.com → 213.171.194.170 (A record, TTL propagated)Verify with: dig +short rmm.xzopiasecure.com api.xzopiasecure.com mesh.xzopiasecure.com
~/.ssh/xzopia_server1 and ~/.ssh/xzopia_server1.pubssh-keygen -R 213.171.194.170
ssh -i ~/.ssh/xzopia_server1 root@213.171.194.170 "echo ok"
cd ~/xzopia-deploy
npm run dev -- setup-server1-full --email simon@xzopia.com -i ~/.ssh/xzopia_server1
Expected duration: 20–40 minutes. The script runs all 9 steps and prints a security review on completion.
https://rmm.xzopiasecure.comfail2ban-client status sshd)grep PasswordAuthentication /etc/ssh/sshd_config → no)