Difference between revisions of "Poddery - Diaspora, Matrix and XMPP"

Update security measures
(Update security measures)
Line 33: Line 33:
* SSH password login disabled (allow only key based logins)
* SSH password login disabled (allow only key based logins)
* root SSH login disabled (use a normal user with sudo)
* root SSH login disabled (use a normal user with sudo)
'''/etc/ssh/sshd_config:'''
  ...
  PermitRootLogin no
  ...
  PasswordAuthentication no
  ...
* Firewall enabled with only the ports we need opened. [https://fxdata.cloud/tutorials/set-up-a-firewall-with-ufw-on-ubuntu-16-04 ufw tutorial]
* Firewall enabled with only the ports we need opened. [https://fxdata.cloud/tutorials/set-up-a-firewall-with-ufw-on-ubuntu-16-04 ufw tutorial]
* fail2ban configured against brute force attacks
* fail2ban configured against brute force attacks