Access
Use SSH keys instead of passwords, disable direct root login and limit SSH access to the users and networks that need it. Consider tools such as fail2ban to slow down brute-force attempts.
Updates
Apply security updates regularly and have a documented patching schedule. Remove packages and services that are not required.
Firewall
Enable a host firewall (for example nftables, firewalld or ufw) with a default-deny policy and allow only the ports the server actually needs.
Logging and monitoring
Make sure system and authentication logs are retained and, ideally, sent to a central location. Monitor for failed logins, disk usage and unexpected services.
Backups and documentation
Hardening is not complete without tested backups and clear documentation of the server’s purpose, configuration and owners.
Is Your IT Infrastructure Ready?
Get a basic IT Infrastructure Health Check and identify potential risks across servers, backup, security, monitoring and cloud infrastructure.
Request an IT Health Check