Julien's dev blog

Basic VPS security checklist

Basic checklist for securing a virtual private server (VPS).

Last updated on: 2024-12-02

Checklist:

  • OS: Use dedicated non-root user
  • SSH: Disable password-based login
  • SSH: Disable root user login
  • SSH: Change port (optional)
  • SSH: Disable IPv4 (optional)
  • Firewall: Setup fail2ban-like service for SSH server
  • Firewall: Deny non-SSH or app-related traffic