A fresh server with default settings gets attacked by bots
within minutes. I will close the common holes and give you
a clear report of what was fixed.
What I do
- SSH: key-only login, no root and no password login
- Firewall (UFW / nftables): only the ports you need are open
- Fail2ban: automatic blocking of brute-force attempts
- Automatic security updates
- Review of open ports, running services and user accounts
- Remove or disable services you don't use
- Security audit with Lynis: score before and after
What you get
- A hardened server that keeps your apps working
- A report: what was wrong, what I changed and why
- Recommendations for next steps
What I need from you
- SSH access (I will send you my public key, no passwords)
- A list of services that must keep working
(website, database, bot, etc.)
Safety first
- I ask you to make a snapshot/backup before any change
- I keep a second SSH session open while changing SSH
and firewall, so you never get locked out
