Nsecbunker on Start-os is rad.
https://github.com/Start9Labs/nsecbunker-startos/tree/master