Is there any checklist for starting the server?

Question

linux

Good afternoon. Is there any checklist (did you meet it somewhere) for getting started with the server on Linux? Well, about
1) Add a user, put it in sudo
2) Remove root from ssh
3) Install rkhunter and add it to cron
4) ...

Answer 1

well, for most servers, regardless of the role, it will do -
1 ssh on another port
2 login only with ssh keys
3 firewall settings - drop everything and open ports of only running services
4 add to monitoring
5 configure backups
6 fill in information about the new server where you are keep an inventory (it doesn’t matter if you have a txt file or ubersmith)

Answer 2

Firewall on its own won't do much. To him in a pair you need IDS. At the installation stage, you need to check the distribution kit (verify with the checksum), did you do it? Then take a snapshot of the file system and periodically check the system files (or those that you choose) for changes, restrict access to your services, configure the log analyzer (parser) so that every time it reads the logs of your services and security programs, it issues "alerts when a suspicious situation arises. Otherwise, you yourself will try to do all this and you will not have time in the end. Then, for each service, its own set of security measures, then the update system, then the reserve. copying, then restoring it on the test server. And then you yourself will be here to answer such questions. Good luck.