Kamal has revolutionized deployment by making it dead simple to ship Docker containers to any
server. But while Kamal handles deployment brilliantly, it leaves server security up to you.
That's where most teams struggle—turning a fresh Ubuntu server into a hardened production
environment requires deep security expertise.
Enter TetsuVPS. Iv've taken the dev-sec.io hardening framework—the same open-source security
baseline trusted by Fortune 500 companies and major enterprises—and adapted it
specifically for Kamal deployments. This framework implements the Ubuntu Security Features and
NSA Guide to Secure Configuration, providing over 130 security checks and automated fixes.
Instead of manually configuring fail2ban, setting up UFW rules, hardening SSH, or wrestling with
AppArmor profiles, TetsuVPS handles it all with a single click. It ensure your Kamal Setup is
production-ready without breaking Docker networking or interfering with your deployment
workflow. Simply connect your server, run a scan, and apply enterprise-grade hardening tailored
for containerized applications.
The dev-sec.io Advantage
The dev-sec.io[1] project provides battle-tested security
baselines used in production by major
enterprises. However, implementing these baselines typically requires deep knowledge of
Ansible, InSpec, and Python—plus hours of configuration and testing to make it work with
Kamal. Most teams using Kamal don't have dedicated security engineers or the time to
implement these frameworks properly.
TetsuVPS bridges this gap. Iv've pre-configured the entire dev-sec.io hardening suite to
work seamlessly with Kamal and Docker. No Ansible playbooks to debug, no Python environments
to manage, no InSpec profiles to write. Just connect your server and click "Apply Hardening"
to get the same security standards used by enterprises worldwide.
What makes TetsuVPS unique is is the focus on Kamal compatibility. I ensure that security
hardening doesn't break your deployments—Docker networking remains intact, ports stay
accessible as configured, and your containers run smoothly. It's enterprise security made
simple, specifically for the modern Kamal workflow.
