this post was submitted on 06 Apr 2022
0 points (NaN% liked)

Linux

48033 readers
974 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

I, recently, started running a Lemmy instance. I am, also, new to Linux servers.

At the advisement of some tech acquaintances, I've installed UnnattendedUpgrades and Fail2ban.

What would you recommend?

top 3 comments
sorted by: hot top controversial new old
[–] [email protected] 0 points 2 years ago (1 children)

i personally don't recommend fail2ban: it's a good way to lock yourself out of your own server but will probably not protect you from any attacks.

for protection unattended upgrades (like you have) and disabling SSH password auth (PasswordAuthentication no in /etc/ssh/sshd_config) is the best you can do.

also i've never run a lemmy instance but make sure the database isn't reachable from the internet, only from localhost :)

[–] [email protected] 0 points 2 years ago* (last edited 2 years ago) (1 children)

If you get locked out by your own fail2ban rules then you've probably forgotten your password.

Not to mentionyoull probably be able to get control back using your hosts console.

[–] [email protected] 0 points 2 years ago

sure sure it's just fail2ban doesn't just apply to SSH and can get your IP banned if you typo on your password on some web service... and from there you can't SSH into the server to fix the problem ;) ;)