vps-security-hardening

This is an administrative VPS setup script, with no clear evidence of intentional malware or unauthorized data exfiltration. It nevertheless presents substantial operational and security risks: it disables SSH host verification, recommends a trivially weak root password, exposes the new-user password in output, interpolates unvalidated arguments into privileged remote shell commands, and makes potentially disruptive SSH, firewall, and Docker changes. Review and validate inputs and configuration before use; do not use the suggested password.