Welcome to Internetport! This guide will walk you through the essential steps to secure and configure your newly provisioned Virtual Private Server (VPS). Following these instructions will help ensure that your server is up-to-date, secure, and ready for deployment.

1. Connect to Your VPS via SSH

To begin, you'll need to connect to your VPS using Secure Shell (SSH). You can do this from a terminal on Linux or macOS, or by using an SSH client like PuTTY on Windows.

  1. Open your terminal or SSH client.
  2. Use the following command to connect, replacing your_ip_address with your VPS's IP address and root if you're using the root user:
ssh root@your_ip_address

2. Update Your System Packages

Keeping your system up-to-date is crucial for security and performance.

  1. If you're using a Debian-based system (like Ubuntu), run:
apt update && apt upgrade -y
  1. If you're using a Red Hat-based system (like CentOS or Fedora), use:
yum update -y

3. Create a New User with Sudo Privileges

For security reasons, it's best to avoid using the root user for daily tasks.

  1. Create a new user:
adduser your_username
  1. Add the user to the sudo group:
usermod -aG sudo your_username

Switch to Your New User

After creating a new user, switch to it using:

su - your_username

4. Configure the Firewall

A firewall is essential for controlling incoming and outgoing network traffic.

  1. If you're using UFW (Uncomplicated Firewall) on Ubuntu, enable it:
sudo ufw enable
  1. Allow SSH connections:
sudo ufw allow ssh

For CentOS/RHEL with Firewalld

  1. Start and enable firewalld:
sudo systemctl start firewalld
sudo systemctl enable firewalld
  1. Add SSH to the firewall rules:
sudo firewall-cmd --permanent --add-service=ssh
sudo firewall-cmd --reload

5. Enable Automatic Security Updates

Automatic updates help keep your system secure by applying patches and updates automatically.

  1. For Ubuntu, install unattended-upgrades:
sudo apt install unattended-upgrades
sudo dpkg-reconfigure -plow unattended-upgrades
  1. For CentOS/RHEL, enable the yum-cron service:
sudo yum install yum-cron
sudo systemctl enable yum-cron
sudo systemctl start yum-cron

6. Set Your Server's Hostname

A hostname is useful for identifying your server.

  1. To set the hostname, use:
sudo hostnamectl set-hostname your_hostname

Troubleshooting

  • SSH Connection Issues: Ensure that SSH is running and that you're using the correct IP address and credentials.
  • Firewall Configuration Errors: Double-check your firewall rules to ensure they are correctly configured. Use sudo ufw status or sudo firewall-cmd --list-all to review them.
  • Update Failures: Verify that your package lists and repositories are up-to-date and accessible.

By following these steps, you'll have a secure and well-configured VPS ready for your applications. If you encounter any issues or need further assistance, please contact our support team.