Security
Hardening Servers 3
The only secure server is: the one that has never started and never had a network cable attached to it! A list of 16 things to start with. #security #server #ssh #2fa #keys #tokens #email
Security
Today security is more important than ever in the history of computing. Take it seriously and be prepared - a security breach is to happen any day. Hardening servers is the key to create secure environments where data is secure and systems work 24/7. Remember it's not if, but when.
Security
Hardening your Servers
A install gets 60-65 points not 100. The obvious is to update and upgrade software and install security hardening apps like firewalls, fail2ban, #ClamAV, #LMD. The first task is to make a plan that we call a IT Security Strategy. After a SSA you start fixing your #security #hardening.
Security
Security Audit and Lynis
Prepare for a Security Audit or check your Server for Security Hardening. All Companies need to take a SA from tile to time by an outside Agency. Many corporations with ISO 9001/27001 certs has written protocols to follow visa-vi testing and setting up services. #security #hardening #audit # lynis
Security
Password Generator
You need to generate complex passwords. Using strings as complicated as possible and 20-30-40 long is good. #password #generator #passwordgenerator
Security
Using VLAN's on Proxmox
How to setup VLAN's on a Proxmox system. Vlans gives security, speed and a cleaner network. VLAN's has been the standard in corporate networking for years and can be found almost everywhere you look. Also the management i/f #MGMT #VLAN
Proxmox
Proxmox Backup Server
Every system and every device needs backups! Proxmox Backup Server is a stunning Backup Server (later PBS). It's highly recommended and a great tool for automation of critical backups. The PBS makes use of the power of ZFS. You can also backup the Proxmox nodes.
Networking
Start using Proxmox
Set up basic services on Proxmox and its VM/CT like personal Add-ons, NTP Chrony, E-mail alerts, Firewall settings, Networking, Users and Pools, Templates Docker, Backup Strategy and DOCUMENTATION.
Security
Hardening Servers - 2
Security measures to make Servers more secure. This second part is about users. Segregation of duties is key to enhancing security. We do it by segregating tasks a user is allowed to do. A newly installed server's security is 60-70%, meaning there is a lot to do.
Build
A redundant DNS - Pi-Stack
Without DNS nothing works. On any corporate network you will find several DNS server, several NTP servers and a lot of Firewalls. – Shouldn't the lab also have multiples of the core services, just in case.
Docker
How do your apps run?
It is a self-hosted monitoring tool like an "Uptime Robot". A dashboard app to show the state of your apps and sites with an easy and informative Dashboard – Uptime Kuma #uptime-kuma #dashboard Kuma (クマ/熊) means bear 🐻 in Japanese.
Build
What nice new toy's we have!
It's time to updete Proxox and the LXC's. A kernel update and many services and tools needs updating. New releases from#Turnkey, #Ubuntu and soon #Fedora - update the #LXC list.
Build
Creating a Certificate Authority
Tired of the nag “Your communication is not private”. Creating a self-signed certs to secure communications is a start. We go deeper and make all the parts from CA to cert. X.509 are used in TLS/SSL, which is the basis for HTTPS. An X.509 cert binds an id to a public key using a digital signature.