It allows you to containerize, build and run your applications with a simple git push.Ĭheck out my own tutorial to learn how to set up and use Dokku. Now that you have your own secure infrastructure, you might want to create applications and services.ĭokku is perfect for that. Learn how to configure MariaDB with this tutorial on DigitalOcean.Learn how to configure MySQL with this tutorial on DigitalOcean.The database should only be allowed from local connections or if ran externally, by whitelisted IPs. I have used MySQL and MariaDB on the past, by default their ports are opened externally, that shouldn't be allowed, as it is a security risk.

Start your configuration journey with this tutorial by Tecmint. Apache2Īpache might require more work, as its defaults leak some information about your system. It includes popular presets, for example for NodeJS and PHP applications. There is also this pretty nifty tool by DigitalOcean that allows you to configure Nginx in a visual manner. Use this tutorial on Acunetix as a starting point. Nginx has various configuration files, its defaults are pretty good but you might want to take a look at it. These are some quick specific guides that you should keep in mind if you use any of this software. Learn how to install and configure Fail2Ban with this tutorial on Linuxize. It bans bad actors from accessing the server for a specified quantity of time.

If you changed the SSH port on an earlier step, you might want to create a new UFW rule for that port.įail2Ban protects you from brute-force attacks. By default it allows http and ssh connections, depending of your use case you might not need some of those rules.Ĭheck out this tutorial on DigitalOcean to learn how to configure UFW. UFW is Ubuntu's default firewall and is extremely useful. It is recommended that you change the default SSH port Its default configuration is good but some changes must be made, like disabling the root user login and changing the default SSH port.įollow the first step of this tutorial on DigitalOcean to learn how to configure SSHD. SSHD manages the SSH connections to the server. Just SSH again with the previous user and copy the credentials to the new user with the rsync utility package.įollow the 5th step of this tutorial on DigitalOcean to do so. This is because the credentials were stored on the user you were using before, most likely root. Now that you have a new user with super user privileges, you might want to SSH in your server with it, but might find that you can't. This tutorial on DigitalOcean will guide you to do that. Instead, we should use a normal user with super user privileges.

Using the default super user root is always bad practice, it does everything with the maximum level of permissions, allowing you to break anything and more critically. This tutorial on Linuxize will help you install and configure the unattended-upgrades package, which is exactly what is needed. Now that the packages are updated, we should install an automated solution to keep the system always up-to-date. Sudo apt update & sudo apt dist-upgrade -y & sudo apt autoremove -y Sudo apt autoremove -y # Remove unnecessary packages # One liner Sudo apt full-upgrade -y # Upgrade packages sudo apt update # Update package information To do so just open the terminal to update and upgrade the packages via apt. The first and probably most important step is to always keep the system up-to-date. If you don't have a server you might want to look at the Useful resources step. It doesn't matter if your server is hosted on DigitalOcean, Google Cloud Engine or Amazon Web Services, Ubuntu should be the same. While this tutorial is focused on Ubuntu 20.04, it can be used for many other versions, like 18.04 and 16.04. Keep in mind that this is not a common tutorial, this is the culmination of all the knowledge I have gathered from managing my own servers for more than three years. This tutorial will help you to set up a secure Ubuntu server from scratch.

Safeincloud ubuntu