Last Updated: November 21, 2025
Areas
| Component | Action |
|---|---|
SSH
|
Disable root, use keys |
Firewall
|
Allow minimal ports |
Audit
|
Log via auditd |
Patching
|
Automate updates |
Commands
ufw allow 22/tcp
Allow SSH
apt-get update && apt-get upgrade
Patch system
auditctl -w /etc/ssh/sshd_config
Watch changes
Monitoring
Ship audit logs to SIEM, alert on failed logins, and rotate keys.
💡 Pro Tip:
Enable updates, disable root login, and ship audit logs off-box.