Second Steps (Buster)

After we're finished with IPMI.

• Setup private key in ~/.ssh/authorized_keys for admin account

I have grown used to vim, lately, so:

• apt-get install vim vim-doc exuberant-ctags
  • Heretics may substitute this with their inferior editor of choice
• update-alternatives --config editor
• Set PasswordAuthentication no in /etc/ssh/sshd_config
• systemctl restart ssh
• After verifying I can sign in, I set the admin's password to something incomprehensible.

Debian Buster

Initial: Designing a Server - IPMI Installation - Second Steps

---

Core: Network - OpenSSH - Packages - sysctl.conf - Iptables - Security - User Management

---

Stack: Unbound - MariaDB - Nginx - PHP (7)

---

Mail

Mail Setup - Mail Tables - OpenDKIM - Mail and DNS - Spamassassin - ClamAV - Postfix - Dovecot - Reputation Management

---

Logs and Security: RKHunter - Logging - Logcheck - Backups - AppArmor