Debian/Ubuntu adjustments

  • sudo fallocate -l 2G /swapfile
  • sudo chmod 600 /swapfile
  • ls -lh /swapfile
  • sudo mkswap /swapfile
  • sudo swapon /swapfile
  • sudo cp /etc/fstab /etc/fstab.bak
  • echo “/swapfile none swap sw 0 0” | sudo tee -a /etc/fstab
  • apt-get update
  • apt-get dist-upgrade -y
  • sudo apt install sudo ufw
  • adduser myuser
  • usermod -aG sudo myuser
  • ufw reset
  • ufw limit 22/tcp
  • ufw limit 8122/tcp
  • ufw allow 8168/tcp
  • ufw enable
  • sudo mkdir /var/run/fail2ban
  • sudo apt-get install fail2ban -y
  • sudo cp /etc/fail2ban/fail2ban.conf /etc/fail2ban/fail2ban.local
  • sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
  • sudo systemctl restart fail2ban
  • sudo fail2ban-client status
  • if install of fail2ban fails (ubuntu 24.04) – the fix is here: https://discuss.frappe.io/t/fail2ban-fails-on-ubuntu-24-04-lts/127658
  • sudo systemctl disable multipathd
  • sudo systemctl disable udisks2