Create a new user
adduser <name>Put them in sudoers:
gpasswd -a <name> sudoLocally, generate a new keypair
ssh-keygen -t rsa -b 4096 -C "[email protected]"
eval "$(ssh-agent -s)" # start ssh agent
ssh-add ~/.ssh/<private key file>Add the generated public key to authorized_keys
su - demo # Assuming you are still logged in as root
mkdir .ssh
chmod 700 .ssh
vim .ssh/authorized_keys
chmod 600 .ssh/authorized_keysDisable root login
vim /etc/ssh/sshd_config
#find the PermitRootLogin
PermitRootLogin noRestart ssh
service ssh restartAllow ssh
sudo ufw allow sshIf its on a different port
sudo ufw allow 4444/tcpEnable IPv6
sudo vim /etc/default/ufwFind and change to IPV6=yes
Stats
sudo ufw status verboseUFW Defaults
sudo ufw default deny incoming
sudo ufw default allow outgoingUFW has some default aliases
sudo ufw allow http
sudo ufw allow https
sudo ufw allow ftpPort Ranges
sudo ufw allow 6000:6007/udp
sudo ufw allow 6000:6007/tcpSpefic ips
sudo ufw allow from 15.15.15.51
sudo ufw allow from 15.15.15.51 to any port 22Subnets
sudo ufw allow from 15.15.15.0/24
sudo ufw allow from 15.15.15.0/24 to any port 22Network interfaces
ip addr # list the network interfaces
# Eg
# 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state
sudo ufw allow in on eth0 to any port 80
sudo ufw allow in on eth1 to any port 3306Denying Just replace allow with deny lol
Deleting Rules You can delete things by number
sudo ufw status numbered # list by number
sudo ufw delete 2Or by rule
sudo ufw delete allow 80references:
https://www.digitalocean.com/community/tutorials/initial-server-setup-with-ubuntu-14-04 https://help.github.com/articles/generating-a-new-ssh-key-and-adding-it-to-the-ssh-agent/#platform-linux https://www.digitalocean.com/community/tutorials/additional-recommended-steps-for-new-ubuntu-14-04-servers https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-with-ufw-on-ubuntu-14-04
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent