My first 10 minutes on a linux server

linux_server_hardening.md

My first 10 minutes on a linux server

# Update
sudo apt-get update
sudo apt-get upgrade -y

# Secure SSH

sudo nano /etc/ssh/sshd_config

# edit those lines :
# PermitRootLogin no 
# PasswordAuthentication no 
# save & exit;

sudo service sshd restart

# Install packages

sudo apt-get install -y curl wget nano ufw fail2ban \
    unattended-upgrades update-notifier-common \
    build-essential software-properties-common \
    python3-dev python3-pip python3-virtualenv apache2-utils

# Auto update

sudo nano /etc/apt/apt.conf.d/10periodic

# add those following lines
# APT::Periodic::Update-Package-Lists "1";  
# APT::Periodic::Download-Upgradeable-Packages "1";  
# APT::Periodic::AutocleanInterval "7";  
# APT::Periodic::Unattended-Upgrade "1";
# save & exit;

# Install docker

curl -fsSL https://get.docker.com -o /tmp/get-docker.sh
sudo sh /tmp/get-docker.sh
sudo usermod -aG docker $USER
mkdir -p ~/docker 

# exit session to enable docker for this user

# Install docker-compose

sudo curl -L "https://github.com/docker/compose/releases/download/1.27.4/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
sudo chmod +x /usr/local/bin/docker-compose

# Setup ufw

sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow ssh
sudo ufw allow http
sudo ufw allow https
sudo ufw enable