Basic Server Hardening Steps

This page summarizes the projects mentioned and recommended in the original post on reddit.com/r/selfhosted

Our great sponsors
  • SonarQube - Static code analysis for 29 languages.
  • Zigi - Workflow assistant built for devs & their teams
  • InfluxDB - Build time-series-based applications quickly and at scale.
  • Scout APM - Truly a developer’s best friend
  • PowerDNS

    PowerDNS Authoritative, PowerDNS Recursor, dnsdist

    To host a few different services, I may opt to use systemd-nspawn containers if they are all running on the same "machine". Another systemd option is to make sure services are using all of the sandboxing options, for example, https://github.com/PowerDNS/pdns/blob/master/pdns/pdns.service.in.

  • ansible-collection-hardening

    This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

  • SonarQube

    Static code analysis for 29 languages.. Your projects are multi-language. So is SonarQube analysis. Find Bugs, Vulnerabilities, Security Hotspots, and Code Smells so you can release quality code every time. Get started analyzing your projects today for free.

  • hardening

    Hardening Ubuntu. Systemd edition.

  • debian-cis

    PCI-DSS compliant Debian 9/10 hardening

  • How-To-Secure-A-Linux-Server

    An evolving how-to guide for securing a Linux server.

  • Zigi

    Workflow assistant built for devs & their teams. Automate the mundane part of your day, with live actionable messages for your GitHub & Jira tasks.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts