Basic Server Hardening Steps

This page summarizes the projects mentioned and recommended in the original post on /r/selfhosted

Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
  • PowerDNS

    PowerDNS Authoritative, PowerDNS Recursor, dnsdist

  • To host a few different services, I may opt to use systemd-nspawn containers if they are all running on the same "machine". Another systemd option is to make sure services are using all of the sandboxing options, for example, https://github.com/PowerDNS/pdns/blob/master/pdns/pdns.service.in.

  • ansible-collection-hardening

    This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
  • hardening

    Hardening Ubuntu. Systemd edition.

  • debian-cis

    PCI-DSS compliant Debian 10/11/12 hardening

  • How-To-Secure-A-Linux-Server

    An evolving how-to guide for securing a Linux server.

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts