Dökümanlar
Security best practices for your Pod
Overview
A new Pod is a clean server that you are responsible for securing. This article is a...
Hardening SSH
Overview
SSH is the main door into your Pod, and internet-facing SSH servers are constantly...
Installing and configuring Fail2ban
Overview
Fail2ban watches your log files and temporarily bans IP addresses that repeatedly fail...
Keeping your server patched
Overview
Most successful server compromises exploit known vulnerabilities that were fixed months...
Protecting your server against malware
Overview
Linux Pods can be infected by malware, rootkits and crypto-mining scripts, usually...
Recognising phishing emails
Overview
Phishing is the most common way attackers gain access to accounts, servers and billing...
Understanding the GDPR and your data
Overview
If you handle personal data belonging to people in the EU/EEA (or the UK under UK...
Configuring a TLS / SSL certificate
Overview
A TLS certificate encrypts traffic between your visitors and your Pod and enables...
Auditing logins and access
Overview
Regularly reviewing who logged in, from where, and what they did helps you detect...
Using a VPN for private access
Overview
A VPN lets you reach services on your Pod — databases, admin panels, internal APIs —...
Securing MySQL and MariaDB
Overview
Databases are a favourite target because they often hold your most sensitive data. This...
Incident response: what to do if you are compromised
Overview
If you suspect your Pod has been compromised — strange processes, unexpected logins,...
