Order Secure base from the Marketplace App tab as shown in how to order a VPS with a one-click app. When the install card on your server page shows the finished result, follow the steps below.
What it does
It needs 1 GB of memory and takes 2 to 5 minutes. It installs and turns on:
- A firewall (ufw) that blocks incoming connections except SSH, port 80 (http) and port 443 (https).
- fail2ban, which blocks addresses that keep guessing passwords.
- Automatic security updates through unattended-upgrades.
The server page shows the result: firewall on, fail2ban on, updates automatic.
Important: open other ports yourself
Because the firewall blocks everything else, any service you run on another port will not be reachable until you allow it. For example:
sudo ufw allow 8080/tcpNext
The manual guide secure your new VPS covers key login and other steps that this base does not.
Next steps
- Connect to your VPS with SSH to run the commands above.
- Secure your new VPS before you put real data on it.
- Something not working? See what happens after you order an app, or open a ticket from Support.