commit a7e90c5657286f11533b3e3402fe4da90e7bc46e parent 72eadf9f9833d896ba20d59a289803621ee87443 Author: Kévin Le Gouguec <kevin.legouguec@gmail.com> Date: Thu, 1 Jul 2021 23:54:24 +0200 Add notes on VPS administration Diffstat:
| A | guides/cloud/vps.org | | | 16 | ++++++++++++++++ |
1 file changed, 16 insertions(+), 0 deletions(-)
diff --git a/guides/cloud/vps.org b/guides/cloud/vps.org @@ -0,0 +1,16 @@ +* Security +** Switch APT to HTTPS +~sudo sed -i 's/http:/https:/' /etc/apt/sources.list~ + +Granted, the repository signature provides enough protection; still, +no sense in wasting bandwidth and CPU if someone is meddling. +** Tweak root access +On OVH's Debian image: +- The =root= account has no password. +- =PermitRootLogin= defaults to =prohibit-password=: set it to =no=. +** Enable fail2ban +~lastb~ says there's about 4000 login attempts per day; that makes +=/var/log/btmp= much bigger than it needs to be. + +Debian's fail2ban comes with a jail for ~sshd~, so it's just a matter +of ~apt install fail2ban~.