\n
In the provider\u2019s welcome email or in your Client Area. For Windows \u2014 open PuTTY, enter the IP in the Host Name field, and click Open.<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
2. Update the system<\/h3>\n\n\n\n
Updates close known vulnerabilities and prepare the server for installing applications.<\/p>\n\n\n\nExample \/ safe command:<\/strong><\/summary>\n\n
# For Debian\/Ubuntu:
sudo apt update && sudo apt upgrade -y
# For AlmaLinux\/Rocky:
sudo dnf upgrade -y<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
3. Create a separate administrative user<\/h3>\n\n\n\n
Do not work under the \u201croot\u201d user all the time. A separate user reduces the risk of accidental system damage.<\/p>\n\n\n\nExample:<\/strong><\/summary>\n\n
# Create a user and add them to the admin group:
sudo adduser myadmin
sudo usermod -aG sudo myadmin # Debian\/Ubuntu
sudo usermod -aG wheel myadmin # AlmaLinux\/Rocky<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
4. Secure server login<\/h3>\n\n\n\n
We recommend using SSH keys and disabling password login. If this is too complicated for now, use a long, unique password.<\/p>\n\n\n\nExample:<\/strong><\/summary>\n\n
# Generate keys on your PC:
ssh-keygen -t ed25519 -C \"your email\"
# Upload the public key to the server:
ssh-copy-id myadmin@YOUR_VPS_IP<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
5. Set correct time and timezone<\/h3>\n\n\n\n
Correct time is important for logs, certificates, and scheduled tasks.<\/p>\n\n\n\nExample:<\/strong><\/summary>\n\n
sudo timedatectl set-timezone Europe\/Kyiv
sudo timedatectl set-ntp true<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
6. Allow only necessary connections (firewall)<\/h3>\n\n\n\n
Open only SSH and web ports (80\/443), block everything else.<\/p>\n\n\n\nExample (UFW, Debian\/Ubuntu):<\/strong><\/summary>\n\n
sudo ufw allow OpenSSH
sudo ufw allow 80
sudo ufw allow 443
sudo ufw enable
sudo ufw status<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
7. Add your domain<\/h3>\n\n\n\n
Create A\/AAAA records in your registrar\u2019s or DNS panel so the domain \u201cpoints\u201d to your VPS.<\/p>\n\n\n\nExample:<\/strong><\/summary>\n\n
Create an A record: @ \u2192 your_IP, and (if needed) www \u2192 your_IP. DNS propagation can take up to 24 hours.<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
8. Get a free SSL certificate<\/h3>\n\n\n\n
Use Let\u2019s Encrypt<\/strong> for https:\/\/<\/strong>. In most panels, it\u2019s done with one click.<\/p>\n\n\n\nExample (without panel):<\/strong><\/summary>\n\n
# Install Certbot (example for Ubuntu):
sudo apt install -y certbot
# Get a certificate for Nginx or Apache:
sudo certbot --nginx -d example.com -d www.example.com
# or
sudo certbot --apache -d example.com -d www.example.com<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
9. Install web server and PHP<\/h3>\n\n\n\n
For WordPress or similar CMS, use Nginx or Apache with PHP.<\/p>\n\n\n\nExample:<\/strong><\/summary>\n\n
# Ubuntu:
sudo apt install -y nginx php-fpm
# AlmaLinux\/Rocky:
sudo dnf install -y nginx php-fpm
# Start and enable on boot
sudo systemctl enable --now nginx php-fpm<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
10. Prepare the database<\/h3>\n\n\n\n
Create a separate user and database for your site. This is safer than working as \u201croot\u201d.<\/p>\n\n\n\nExample (MySQL\/MariaDB):<\/strong><\/summary>\n\n
sudo mysql_secure_installation
mysql -u root -p
CREATE DATABASE site_db CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
CREATE USER 'site_user'@'localhost' IDENTIFIED BY 'long_password';
GRANT ALL PRIVILEGES ON site_db.* TO 'site_user'@'localhost';
FLUSH PRIVILEGES;<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
11. Enable backups<\/h3>\n\n\n\n
Set up daily backups of your website and database. Store copies off-server if possible.<\/p>\n\n\n\nExample:<\/strong><\/summary>\n\n
# Simple DB dump (cron, daily):
mysqldump -u site_user -p'password' site_db > \/var\/backups\/site_db_$(date +%F).sql
# Backup site directory:
tar -czf \/var\/backups\/site_files_$(date +%F).tar.gz \/var\/www\/example.com<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
12. Enable automatic security updates<\/h3>\n\n\n\n
Enable automatic updates for security packages so you don\u2019t miss important patches.<\/p>\n\n\n\nExample:<\/strong><\/summary>\n\n
# Ubuntu (unattended-upgrades):
sudo apt install -y unattended-upgrades
sudo dpkg-reconfigure --priority=low unattended-upgrades<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
13. Basic protection against brute-force attacks<\/h3>\n\n\n\n
Enable account lockout after several failed login attempts (where supported) or ask support to assist.<\/p>\n\n\n\nExample (Fail2Ban for SSH):<\/strong><\/summary>\n\n
# Ubuntu:
sudo apt install -y fail2ban
# Start the service:
sudo systemctl enable --now fail2ban<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
14. Configure website email sending<\/h3>\n\n\n\n
It\u2019s better to use an external SMTP service (or your provider\u2019s mail) and add SPF\/DKIM records in DNS for better deliverability.<\/p>\n\n\n\nExample:<\/strong><\/summary>\n\n
In your CMS\/plugin, specify your SMTP account details (server, port, username\/password, TLS). Add an SPF record (TXT type) in DNS that allows sending via your SMTP service.<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
15. Create short documentation<\/h3>\n\n\n\n
Describe where credentials are stored, how to make\/restore backups, how to update the system, and whom to contact in case of issues.<\/p>\n\n\n\nQuick template:<\/strong><\/summary>\n\n
\u2022 Access: IP, SSH user, SSH key location, panel access
\u2022 Domain & DNS: registrar, where records are edited
\u2022 Certificates: expiration date, issued by (Let\u2019s Encrypt)
\u2022 Backups: where they\u2019re stored, how to restore
\u2022 Updates: frequency, responsible person
\u2022 Contacts: provider support, administrator<\/pre>\n<\/div><\/div>\n<\/details>\n\n\n\n<\/p>\n\n\n\n
\n\n\n\nFinal self-check:<\/strong> the site opens via https<\/strong>, the domain correctly \u201cpoints\u201d to the server, backups are created, there are no errors in the panel, and the firewall allows only necessary services.<\/p>\n\n\n\n