First steps with a new server
A short checklist that protects a Linux server from day one.
Servers on the internet are scanned within minutes of going online. Do these first:
- Change the password you received: run
passwd. - Update the system:
apt update && apt upgrade -y # Ubuntu / Debian
dnf upgrade -y # AlmaLinux / Rocky- Use SSH keys and turn off password login once your key works. See Connecting with SSH.
- Turn on a firewall and allow only the ports you need (22, 80, 443): in IDX Panel's Firewall tab, or on the server with UFW.
- Install the INSIDX agent to see memory and disk use and get alerts. See The INSIDX agent.
- Set up backups before you put anything important on the server. See Backups and snapshots.
Go further with our Linux server hardening checklist and the free Hardening a Linux server course.