joakim/rick-infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Initial commit

Browse Source
This commit is contained in:
Joakim
2025-11-12 20:48:28 +01:00
commit 0b6eea6113
7 changed files with 399 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
docs/security-hardening.md Normal file
View File

@@ -0,0 +1,7 @@
# Securing the VPS
## Network Security
- **SSH Hardening**: Password authentication disabled, root login disabled, key-only authentication
- **Firewall Configuration**: UFW with deny-all incoming, allow-all outgoing defaults
- **Fail2ban**: SSH brute-force protection with configurable ban times
- **Kernel Network Hardening**: IP forwarding disabled, source routing blocked, ICMP redirects disabled