Secure Linux & protect servers from Hackers with Fail2Ban #Hardening #vps #vpn

Running your own little (virtual) linux server opens a whole new world of possibilities:
1. Run your own truly private VPN
2. Host your own Cloud for yourself, family and friends
3. Secure your DNS (PiHole), sync files (Syncthing), archive documents (Paperless-ngx) and so much more…
👉️👉️ BUT:
The no. 1 fear when self-hosting is: Getting hacked. Security isn't a natural occurrence. You have to do stuff to make your server secure. But what stuff is really worth it? Do I really have to follow all "best practices" out there?
👉️👉️ Introducing LAZY HIGH SECURITY
This video is all about doing the right things for beginners. Enough to be safe against all typical attacks but not so much that we have to change our lifestyle, our name and what we eat.
👉️👉️ Chapters:
00:00 Introduction: Your own Linux server & LAZY SECURITY
01:16 Get a Linux Server or VPS
02:11 Safe root password
02:48 Software updates
04:09 Add a new user with SUDO
08:03 Disable root logins
09:27 Install fail2ban
14:25 Firewall UFW: Install & configure
18:08 Automatic (unattended) upgrades / updates
20:36 SSH Keys, additional notes
I highly recommend using SSH Keys, but they are not needed if you don't feel like you want to have to manage your SSH keys as a beginner.
VPS providers:
+ EU: www.alwyzon.com
+ EU & US: www.hetzner.com
+ US: www.digitalocean.com (They help finance linuxserver.io - so they should be supported!)
+ US: www.vultr.com
+ US & UK: www.racknerd.com (Obscure payment options)

[@JosephBenson]

Wow this is what I have been looking for, for years now. Thank you 🎉😂😊 I want to say God bless you, you really safe me from hackers now.

[@massgrave8x]

this is my go-to resource for hardening ubuntu server instances. thank you for these clear and concise explanations.

[@DigitalIndependent]

Thanks! Happy to help! Do try using ssh keys also :)

[@thekrobar]

Awesome stuff! Your explanation of fail2ban was great! I got my VPS secured now

[@DigitalIndependent]

Glad it helped! Fail2ban can be a bit tricky… Try the ssh keys if you haven’t tried them yet :) And lots of fun with your VPS!

[@whatawhatnow]

Thank you for the clear and concise guide.

[@DigitalIndependent]

Thanks for your nice and motivational comment :)

[@jimcabezola3051]

I really like your CLEAR explanation of fail2ban. I feel more confident to do this on my Debian 12 laptop and this Mint 21.1 Mac Mini.

[@DigitalIndependent]

Thanks :) Fail2ban can be a bit intimidating, but it’s a great tool. Hope you have lots of fun with it and block all the bad stuff out there :)

[@jimcabezola3051]

@@DigitalIndependent Tinkering in Linux gives me a sense of control over things in my life. In a world spinning out of control, Linux is a help to me. Having JUST installed it less than an hour ago on both Mint 21.1 and Debian 12, i found my first surprise that "whois" was NOT a standard part of MY Linux distros. That was on the distros at work, but not at home. Hmmm...fascinating. I will ENJOY tinkering with this. Mahalo!

[@CliffordHepplethwaite]

Thanks. Exactly what I needed. Subbed

[@DigitalIndependent]

Thanks! Private (as in your own) VPN coming soon.

[@rezzahilman615]

i like your video, always give a good work there

[@DigitalIndependent]

Thank you very much!

[@BrandonGroves84]

Great content!

[@DigitalIndependent]

Thanks :)

[@jim6477]

Great video, thanks!

[@DigitalIndependent]

Thanks! Glad I could help :)

[@jjiacobucci]

Outstanding content. Danke

[@DigitalIndependent]

Bitteschön! Freut mich zu lesen. Der Akzent sollte aber nicht so deutlich sein :)

[@Jamxknife]

Thanks been looking for something like this

[@iHusbandry]

Excellent

[@DigitalIndependent]

Thank you! Cheers! :)

[@lordquadrato437]

sudo ufw status just yielded "Status: inactive", and when I enabled it, the status still didn't display any ALLOW ports. I don't know if I doged a bullet because I was still connected, but I quickly added port 22. Mighty be good to keep in mind to check that first.

[@sudtheshawty]

will you continue to make more videos?

[@DigitalIndependent]

I had a video done and ready on your personal VPN. But the maintainer noped out, killing my video. Redid it, it’s in post production.

[@takennmc]

btw when you edit sshd config you should restart sshd with systemctl restart sshd so the new config applies as you may run the server without reboot for a while and have the bad setting

[@DigitalIndependent]

Thanks for pointing that out!

[@iamrage4753]

Crowdsec?

[@DigitalIndependent]

Yes. A good option. But sometimes a bit tricky for absolute beginners…

[@fitnessimage126]

thanks bro