This hub organizes LinuxPanda’s practical server-security guides. The recommendations focus on reducing exposed services, limiting privileges, protecting remote access and verifying changes before they reach production.
Start with the security baseline
- Linux server-hardening checklist — twelve practical controls for a new or existing server.
- Set up UFW on current Ubuntu releases — firewall defaults and controlled service access.
- Configure SSH key authentication — replace routine password-based access with keys.
- Disable direct SSH root login — reduce exposure while preserving administrative access.
Secure services and administration
- OpenVPN Connect on macOS — installation, profiles and troubleshooting.
- Allow MariaDB and MySQL remote connections safely — bind addresses, limited users and firewall controls.
- Secure Nginx with Let’s Encrypt — current TLS certificate deployment on EL9 systems.
- Configure passwordless sudo carefully — narrow command rules and security trade-offs.
Always keep a recoverable backup and a second administrative session open when changing firewall, SSH or privilege rules. Commands should be adapted to the operating-system version identified in each guide.