Differences

This shows you the differences between two versions of the page.

--- server_rudimentaer_absichern [2021/08/10 13:41] – admin
+++ server_rudimentaer_absichern [2021/08/11 08:25] – admin
@@ Line 1: / Line 1: @@
 ====== VServer mit Debian 10 rudimentär absichern ======
- mysql_secure_installation
+===== 1 MySQLs desaströse Grundinstallation richten =====
- useradd -g users -d /home/user user
+     mysql_secure_installation
+===== User zufügen, damit man sich im Notfall mit PW einloggen kann =====
+    useradd -g users -d /home/user user
     passwd user
     mkdir /home/user
-    chown sven /home/user/
+    chown user /home/user/
         Check, if user can "su -" before proceeding to next step!!!
- nano /etc/ssh/sshd_config
+===== Rootlogin nur mit SSH-Key zulassen =====
+     nano /etc/ssh/sshd_config
         PermitRootLogin without-password
+===== Universal Fire Wall installieren und ssh, http und https zulassen =====
+    apt install ufw
+    ufw default deny incoming
+    ufw default allow outgoing
+    ufw allow ssh
+    ufw allow http
+    ufw allow https
+    ufw enable
+===== Failban aktivieren, weil dann logfiles lesbarer werden ;-) =====
+    apt install fail2ban
+    cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
+    nano /etc/fail2ban/jail.local
+        Adjust whatever you like here.
+    systemctl restart fail2ban.service
+===== Unattended Upgrades, damit immer alles aktuell ist =====
+    apt-get install unattended-upgrades apt-listchanges