Tutorials

Step-by-step guides for your cloud servers: installs, configuration and best practices.

How to set up your own VPN with WireGuard

Run your own private, fast and secure VPN with WireGuard on a VPS, for private browsing and secure access.

A few HTTP headers protect your visitors from common attacks like clickjacking and content injection.

Install ClamAV, an open-source antivirus, and periodically scan your server for infected files.

Find out which services are listening for connections on your server and close what you do not need, for less exposure.

Protect your site from bots and simple attacks by limiting the number of requests per second from an IP.

Let your server install security patches on its own with unattended-upgrades, so you never stay vulnerable.

fail2ban automatically bans IPs that repeatedly try wrong passwords. Here is how to install and configure it.

Reduce your server attack surface by disabling SSH root login and moving SSH to a different port.

Drop passwords for SSH and use keys, far more secure and impossible to brute-force.

Do not work as root. Create a normal user with sudo for safe administrative operations.

Block all unwanted traffic to your server with UFW, a firewall that is simple to configure on Ubuntu.

Make your site faster with gzip compression, static file caching and HTTP/2, a few lines of config.