A fresh VPS is exposed to the internet the moment it boots. These ten steps take ten minutes and block the vast majority of automated attacks.
The checklist
- Update all packages
- Create a non-root sudo user
- Add your SSH key
- Disable password login
- Disable root SSH login
- Enable a firewall (ufw or firewalld)
- Install fail2ban
- Enable automatic security updates
- Set the correct timezone and NTP
- Schedule snapshot backups
Every RMDHost VPS already includes network-level DDoS protection, so you can focus on hardening the operating system.
