Server security
SSH, firewalls, automatic updates and checking for a break-in.
- Automatic security updates on Ubuntu and DebianLet unattended-upgrades install security updates every day, include PHP from Ondřej Surý's repositories, choose whether the server may reboot, and check that it works.
- Check your server for a break-inSigns that someone got into your Linux server, how to look for them (unknown PHP files, strange processes, new users, SSH keys, cron jobs, open ports, logins) and what to do when you find something.
- Secure SSH on your serverLog in with an SSH key instead of a password, turn off password logins and root logins with a password, block repeated failed logins with fail2ban, and do it without locking yourself out.
- Set up a firewall with ufwTurn on ufw on Ubuntu or Debian without locking yourself out, open only the ports you need (with the ports of a Pterodactyl panel and node as an example), and know why Docker ports are not covered.