What are the best practices to secure a development server where the staff is remote?
On that server, it will run apache2 webserver and mysql.
Server O/S is Debian 9.
My idea is that:
Only SSH connections with SSH keys will be allowed.
Every employee will have permissions only in its home directory.
Employees will have permissions to run only some allowed sudo commands.
Am I missing something?