VPS security
SSH keys, firewall, fail2ban and hardening a new VPS.
- 5 guides
- Securing a new VPS: a step-by-step checklistWhat to do right after your VPS is created: updates, a new root password, a sudo user, an SSH key, a firewall, fail2ban and automatic security updates. Every step explained.
- SSH key: log in without a password (ed25519, PuTTYgen)Create an ed25519 SSH key, upload it to your VPS and safely turn off password login. Steps for Windows, macOS, Linux and PuTTY, including ssh-agent and the ~/.ssh/config file.
- Firewall in the customer area: rules for your VPSThe customer area firewall filters traffic before it reaches your VPS. How to switch to Block everything except allowed, add a rule, and ready-made rule sets for SSH, web, Minecraft, FiveM, Rust and a game panel.
- Firewall inside the VPS: UFW (and nftables for advanced users)Set up the UFW firewall right inside your VPS without locking yourself out: default policy, rules for services, limiting by IP address, limit, IPv6, logs. Why Docker bypasses UFW and how to use nftables.
- Fail2ban: automatically block attacks on SSHFail2ban watches failed logins and blocks attackers automatically. Installation on Ubuntu 24.04 and Debian 13, jail.local explained line by line, recidive, unbanning an IP and fixing errors.
Can't find a guide? Write to us:[email protected]or on DiscordDiscord