linux-server-setup-checklist.md

• determine network manager

  • may replace others with NetworkManager?

• setup DHCP

• setup DNS manager config

  • may replace others with systemd-resolved?

• setup mDNS if needed

• cleanup per-link settings in network manager you may set

• upload your ssh public key

• check default sshd configs

  • remove additional default configs(e.g. cloud-init)
  • prevent root login or password login
  • disable X11 forwarding

• setup timezone

• double-check NTP server

  • setup time synchronized config
  • set NTP server to time.cloudflare.com with NTS if needed

• optimize fstab mount options

• set the production user password

• lock the root account if needed

• install and setup tuned

• remove default firewall daemon if have

• install and setup firewalld

• check fwupd

• update system

• reboot