Get the latest tech news
Securing a Linux Server
A guide to secure and harden a Linux server install.
This post goes over the following: adding a non-root user, securing SSH, setting up a firewall (UFW), blocking known bad IPs with a script, hardening Nginx reverse-proxy configs, implementing Nginx Proxy Manager’s “block common exploits” functionality, setting up Fail2Ban, and implementing LinuxServer’s SWAG’s Fail2Ban jails. CrowdSec is complicated to set up, wastes resources, requires an account, and in my opinion, overkill. To avoid getting indexed by search engines, add the following lines to your server blocks:
Or read this on Hacker News