Guide: secure your VPS
Practical baseline checklist for production hardening.
Minimum baseline
Steps
- Rotate root password and use strong secrets.
- Restrict SSH exposure via firewall and dedicated SSH port.
- Only open strictly required service ports.
- Use snapshots and backups before risky changes.
Progressive hardening
Key points
- Strict firewall policy with explicit allow rules.
- Uptime + resource monitoring for early detection.
- Documented rollback workflow (snapshot restore).