From a7e90c5657286f11533b3e3402fe4da90e7bc46e Mon Sep 17 00:00:00 2001 From: Kévin Le Gouguec Date: Thu, 1 Jul 2021 23:54:24 +0200 Subject: Add notes on VPS administration --- guides/cloud/vps.org | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 guides/cloud/vps.org diff --git a/guides/cloud/vps.org b/guides/cloud/vps.org new file mode 100644 index 0000000..cfb1b89 --- /dev/null +++ b/guides/cloud/vps.org @@ -0,0 +1,16 @@ +* Security +** Switch APT to HTTPS +~sudo sed -i 's/http:/https:/' /etc/apt/sources.list~ + +Granted, the repository signature provides enough protection; still, +no sense in wasting bandwidth and CPU if someone is meddling. +** Tweak root access +On OVH's Debian image: +- The =root= account has no password. +- =PermitRootLogin= defaults to =prohibit-password=: set it to =no=. +** Enable fail2ban +~lastb~ says there's about 4000 login attempts per day; that makes +=/var/log/btmp= much bigger than it needs to be. + +Debian's fail2ban comes with a jail for ~sshd~, so it's just a matter +of ~apt install fail2ban~. -- cgit v1.2.3