Viewing articles tagged 'security'
Security best practices for your Pod
Overview
A new Pod is a clean server that you are responsible for securing. This article is a...
Hardening SSH
Overview
SSH is the main door into your Pod, and internet-facing SSH servers are constantly...
Configuring a firewall with ufw
Overview
ufw (Uncomplicated Firewall) is the default front-end for iptables/nftables on Ubuntu...
Enabling two-factor authentication (2FA)
Overview
Two-factor authentication (2FA) adds a second check at login, protecting your ALYPOD...
Installing and configuring Fail2ban
Overview
Fail2ban watches your log files and temporarily bans IP addresses that repeatedly fail...
Configuring a firewall with firewalld
Overview
firewalld is the default firewall management tool on Rocky Linux, AlmaLinux, Fedora and...
Keeping your server patched
Overview
Most successful server compromises exploit known vulnerabilities that were fixed months...
Resetting your account password
Overview
If you cannot sign in to account.alypod.com, you can reset your password from the
login...
Initial server hardening after installation
Overview
A freshly installed Pod is reachable from the whole internet, so a few quick steps...
Logging in to the ALYPOD Console
Overview
The ALYPOD Console is where you deploy and manage CPU Pods, while billing and
account...
Protecting your server against malware
Overview
Linux Pods can be infected by malware, rootkits and crypto-mining scripts, usually...
Securing WordPress
Overview
A default WordPress install is functional but not hardened. Attackers constantly scan...
DDoS protection overview
Overview
ALYPOD protects its network with always-on DDoS mitigation at the edge of our...
Recognising phishing emails
Overview
Phishing is the most common way attackers gain access to accounts, servers and billing...
Adding and managing SSH keys
Overview
SSH keys are safer than passwords and let you log in without typing a secret. This...
Updating the operating system
Overview
Regular updates patch security holes and fix bugs. This article shows how to update...
Auditing logins and access
Overview
Regularly reviewing who logged in, from where, and what they did helps you detect...
Changing the SSH port and disabling root login
Overview
Most automated attacks target SSH on port 22 and the root account. Changing the port...
Using a VPN for private access
Overview
A VPN lets you reach services on your Pod — databases, admin panels, internal APIs —...
Securing MySQL and MariaDB
Overview
Databases are a favourite target because they often hold your most sensitive data. This...
Incident response: what to do if you are compromised
Overview
If you suspect your Pod has been compromised — strange processes, unexpected logins,...
