Add notes on VPS administration

1 files changed, 16 insertions, 0 deletions

diff --git a/guides/cloud/vps.org b/guides/cloud/vps.org
new file mode 100644
index 0000000..cfb1b89
--- /dev/null
+++ b/guides/cloud/vps.org
@@ -0,0 +1,16 @@
+* Security
+** Switch APT to HTTPS
+~sudo sed -i 's/http:/https:/' /etc/apt/sources.list~
+
+Granted, the repository signature provides enough protection; still,
+no sense in wasting bandwidth and CPU if someone is meddling.
+** Tweak root access
+On OVH's Debian image:
+- The =root= account has no password.
+- =PermitRootLogin= defaults to =prohibit-password=: set it to =no=.
+** Enable fail2ban
+~lastb~ says there's about 4000 login attempts per day; that makes
+=/var/log/btmp= much bigger than it needs to be.
+
+Debian's fail2ban comes with a jail for ~sshd~, so it's just a matter
+of ~apt install fail2ban~.