Installation Guide
Get SecLayer running on your server with the universal installer.
Quick Install
Run the following command as root:
wget -O seclayer.sh https://a.softaculous.com/seclayer/files/install.sh
chmod 0755 seclayer.sh
./seclayer.sh
The installer auto-detects your OS, control panel, and running services. It configures everything with sensible defaults — no manual input required. If CSF is detected, the installer can migrate your existing configuration to SecLayer and remove CSF with your permission.
What the Installer Does
- Detects your OS distribution and version
- Identifies your control panel (if any)
- Scans for listening services and open ports
- Generates iptables rules based on discovered services
- Installs and starts the LFD daemon
- Configures DDoS protection defaults
- Sets up email alert templates
- Enables the service to start automatically on boot
Post-Installation Steps
- Verify the installation:
seclayer -l(lists current firewall rules) - Check LFD status:
seclayer --lfd-status - Review configuration at
/etc/seclayer/seclayer.conf - Configure alert email recipients in the config file
- Set custom thresholds as needed
Manual Installation
If the universal installer does not work, download the package, extract it to /usr/local/seclayer/, and configure the init script for your init system.