0

I have a service that's spinning up fresh Ubuntu 16.04 instances onto a VPS (on behalf of users) and would really like to do what I can in terms of putting good privacy and security practices in by default.

This is pre any sort of web server or database install, just the base Ubuntu LTS.

closed as too broad by Steffen Ullrich, Tobi Nary, ISMSDEV, Serge Ballesta, Arminius Nov 20 '17 at 14:14

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 6
    I'm afraid your question is really broad. Secure against what? Privacy in terms of what? – Arminius Nov 20 '17 at 1:52
4

The CIS benchmarks provide very clear instructions on what should be made to secure most known systems.

3

I use centos more then ubuntu but I would disable ssh password logins and only use ssh keys. If you must use ssh passwords install an app called fail2ban which temp bans people trying to brute force. Also makes sure you dont have any services running you don’t need on the public internet. only the ones needed. use a firewall to make that happen. I use iptables think ubuntu uses firewalld .. but would have to check.

This site is temporarily in read only mode and not accepting new answers.

Not the answer you're looking for? Browse other questions tagged .