vps-security-hardening

Automate VPS security hardening by running an SSH-based script that creates a sudo user, changes the SSH port, configures UFW and Fail2ban, and enforces key-based authentication. This reduces manual configuration errors during new server provisioning.

VPS security hardening supports Ubuntu 22.10-23.10 by addressing SSH socket activation versus systemd configurations. This ensures reproducible provisioning and correct SSH service behavior across those specific Ubuntu versions.

Yes, the hardening workflow disables root password login and sets up key-based SSH authentication automatically. It creates a restricted sudo user and enforces non-standard SSH ports to secure remote access.

Yes, you need sshpass installed to run the automated hardening script, which connects to your VPS via SSH using the root password to install and configure UFW firewall and Fail2ban remotely.

Apply an automated hardening script to install and configure UFW for firewall rules and Fail2ban for intrusion prevention. This enforces best practices end-to-end, including optional login notifications and Docker awareness.

Changing the SSH port requires updating UFW firewall rules to allow traffic on the new non-standard port. The hardening script handles this configuration automatically, but manual changes without updating UFW will lock you out.