Basic familiarity with the command line<\/li><\/ul>\n\nStep 1: Connecting via SSH<\/h2>\n\n
SSH (Secure Shell) is the standard protocol for remotely managing Linux servers. Open your terminal and run:<\/p>\n\n
ssh root@192.0.2.1<\/code><\/pre>\n\nReplace 192.0.2.1<\/code> with your actual server IP. On the first connection, you will see a fingerprint prompt:<\/p>\n\nThe authenticity of host '192.0.2.1 (192.0.2.1)' cannot be established.\nED25519 key fingerprint is SHA256:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.\nAre you sure you want to continue connecting (yes\/no\/[fingerprint])?<\/code><\/pre>\n\nVerify the fingerprint matches what your provider shows in their dashboard, then type yes<\/code>. Enter the root password when prompted.<\/p>\n\nStep 2: Initial Server Hardening<\/h2>\n\n
Once logged in, immediately secure your server with these three essential steps:<\/p>\n\n
Update the System<\/h3>\n\n
Run the update commands for your distribution:<\/p>\n\n
Ubuntu\/Debian:<\/strong><\/p>\n\napt update && apt upgrade -y<\/code><\/pre>\n\nCentOS\/Rocky\/AlmaLinux:<\/strong><\/p>\n\ndnf update -y<\/code><\/pre>\n\nCreate a Non-Root User<\/h3>\n\n
Logging in as root is a security risk. Create a regular user with sudo privileges:<\/p>\n\n
adduser adminuser\nusermod -aG sudo adminuser<\/code><\/pre>\n\nEnable SSH Key Authentication<\/h3>\n\n
On your local machine, generate an SSH key pair:<\/p>\n\n
ssh-keygen -t ed25519 -C \"your_email@example.com\"<\/code><\/pre>\n\nThen copy the public key to your server:<\/p>\n\n
ssh-copy-id adminuser@192.0.2.1<\/code><\/pre>\n\nAfter confirming key-based login works, disable password authentication in \/etc\/ssh\/sshd_config<\/code> by setting PasswordAuthentication no<\/code>, then restart SSH: systemctl restart sshd<\/code>.<\/p>\n\nUFW (Uncomplicated Firewall) is the simplest option on Ubuntu:<\/p>\n\n
ufw allow OpenSSH\nufw enable\nufw status verbose<\/code><\/pre>\n\nAlways allow SSH before enabling the firewall, or you will lock yourself out.<\/p>\n\n
Step 4: Install a Web Server<\/h2>\n\n
For a typical web hosting setup, install Nginx or Apache along with PHP and MySQL\/MariaDB:<\/p>\n\n
apt install nginx mysql-server php-fpm php-mysql -y<\/code><\/pre>\n\nSecure the MySQL installation:<\/p>\n\n
mysql_secure_installation<\/code><\/pre>\n\nConfigure Nginx to use PHP-FPM by editing the default server block at \/etc\/nginx\/sites-available\/default<\/code> and uncommenting the PHP processing lines. Test the configuration with nginx -t<\/code>, then restart Nginx: systemctl restart nginx<\/code>.<\/p>\n\nStep 5: Monitoring and Maintenance<\/h2>\n\n
Set up basic monitoring to track resource usage:<\/p>\n\n
apt install htop iotop net-tools -y<\/code><\/pre>\n\nUse htop<\/code> for real-time CPU and memory monitoring. Schedule weekly automatic updates with unattended-upgrades<\/code> on Ubuntu or configure a cron job for dnf-automatic<\/code> on RHEL-based distros.<\/p>\n\n