Why do I need to change the SSH port?

Changing the SSH port improves server security by moving away from the default port 22, which is commonly targeted by attackers.

What is the purpose of enabling the UFW firewall?

Enabling the UFW firewall helps to manage rules for incoming and outgoing traffic, enhancing server security.

How can I add a swap file if my server has limited RAM?

You can create a swap file with commands that allocate space, convert it to swap, and activate it to extend RAM virtually.

Why is changing the server hostname important?

Changing the hostname is essential for mail server settings and to ensure DNS consistency, especially if mails are to be sent.

What is a fully qualified domain name (FQDN)?

An FQDN is a complete domain name that specifies its exact location in the tree hierarchy of the Domain Name System (DNS).

How do you enable automatic updates on Ubuntu?

Automatic updates can be enabled by installing necessary packages like unattended-upgrades and configuring update settings in specific system files.

How can you send mail from the server?

Ensure the hostname is properly set, use a mail client, and make sure your server can send out mail through proper configuration.

What is the purpose of a swap file on a server?

A swap file acts as an extension of RAM, allowing the system to manage more processes by using disk space as virtual memory.

Why should DNS settings be updated after changing the hostname?

Updating DNS settings ensures that reverse DNS lookups match the new hostname, which is crucial for mail delivery and server identification.

How can server security be enhanced through SSH configuration?

Server security can be enhanced by disabling root login, changing SSH default port, and using SSH keys for authentication.

Contabo VPS Ubuntu 22 04 Server setup PART 2 Ubuntu 22 04 Initial server setup

00:39:44

https://www.youtube.com/watch?v=p6NZ8Z07T7E

Zusammenfassung

TLDRIl video offre una guida dettagliata su come impostare un server Ubuntu su Contabo. Inizia con il login sul server e procede con l'installazione e la verifica del firewall UFW. Viene spiegata l'importanza di cambiare la porta SSH per aumentare la sicurezza e di impostare un file swap se la RAM è limitata. Successivamente, si cambia l'hostname del server, essenziale per la configurazione dei server di posta e per garantire la coerenza dei DNS. Viene anche illustrato come abilitare gli aggiornamenti automatici per mantenere il server aggiornato senza intervento manuale continuo. Sono coperte anche le basi della gestione delle porte attraverso UFW e l'importanza di abilitare o disabilitare determinate porte a seconda delle esigenze del server. Viene infine descritto come configurare un setup di sicurezza incrementato attraverso SSH, disabilitando il login come root e utilizzando chiavi SSH per l'autenticazione. L'intero processo si chiude con l'installazione di aggiornamenti automatici per garantire che il server sia protetto e aggiornato in qualsiasi momento.

Mitbringsel

🔒 Cambia la porta SSH per sicurezza.
🛡️ Abilita e configura il firewall UFW.
🧠 Crea un file swap se la RAM è limitata.
📛 Cambia l'hostname del server per DNS corretti.
🔄 Abilita aggiornamenti automatici su Ubuntu.
📧 Imposta nome host per invio di mail.
🚫 Disabilita login come root.
🔑 Utilizza chiavi SSH per autenticazione.
🌐 Gestisci impostazioni DNS dopo cambio hostname.
🖥️ Installa il pannello di controllo per facilitare gestione server.

Zeitleiste

00:00:00 - 00:05:00
登录服务器后，设置防火墙的UFW确保已安装并启用，然后修改SSH端口。在启用防火墙后，确保允许必要的流量变化并添加相应的规则。
00:05:00 - 00:10:00
将SSH的默认端口更改为新的端口，并通过Nano编辑SSH配置文件，确保在防火墙中已许可新的SSH端口。重启SSH服务以使更改生效。
00:10:00 - 00:15:00
讨论在小内存服务器中创建一个交换文件以扩展虚拟内存，列出不同内存大小下推荐的交换文件大小。并演示如何设置交换文件及确保其在系统重启后启用。
00:15:00 - 00:20:00
修改服务器的主机名，并通过编辑hosts文件确保系统和应用能正确识别新的主机名。同时，设置反向DNS以与新的主机名匹配，确保邮件服务器设置正确。
00:20:00 - 00:25:00
配置系统时区，以确保日志和应用程序可以正确记录时间。随后，设置自动更新，让服务器可以自动下载和安装更新，减轻维护负担。
00:25:00 - 00:30:00
深入配置自动更新中的选项，包括黑名单中不愿更新的软件包，并通过邮件通知接收更新报告。另外，指定一些情况下自动重启服务器以应用更新。
00:30:00 - 00:39:44
初步服务器设置完成，建议安装轻量级控制面板HSTRACK以便管理PHP应用。提供在Cloudflare下或使用自建DNS服务器的名称解析设置建议。

Mind Map

Häufig gestellte Fragen

Why do I need to change the SSH port?
Changing the SSH port improves server security by moving away from the default port 22, which is commonly targeted by attackers.
What is the purpose of enabling the UFW firewall?
Enabling the UFW firewall helps to manage rules for incoming and outgoing traffic, enhancing server security.
How can I add a swap file if my server has limited RAM?
You can create a swap file with commands that allocate space, convert it to swap, and activate it to extend RAM virtually.
Why is changing the server hostname important?
Changing the hostname is essential for mail server settings and to ensure DNS consistency, especially if mails are to be sent.
What is a fully qualified domain name (FQDN)?
An FQDN is a complete domain name that specifies its exact location in the tree hierarchy of the Domain Name System (DNS).
How do you enable automatic updates on Ubuntu?
Automatic updates can be enabled by installing necessary packages like unattended-upgrades and configuring update settings in specific system files.
How can you send mail from the server?
Ensure the hostname is properly set, use a mail client, and make sure your server can send out mail through proper configuration.
What is the purpose of a swap file on a server?
A swap file acts as an extension of RAM, allowing the system to manage more processes by using disk space as virtual memory.
Why should DNS settings be updated after changing the hostname?
Updating DNS settings ensures that reverse DNS lookups match the new hostname, which is crucial for mail delivery and server identification.
How can server security be enhanced through SSH configuration?
Server security can be enhanced by disabling root login, changing SSH default port, and using SSH keys for authentication.

Weitere Video-Zusammenfassungen anzeigen

Erhalten Sie sofortigen Zugang zu kostenlosen YouTube-Videozusammenfassungen, die von AI unterstützt werden!

Untertitel

Automatisches Blättern:

00:00:07
and there we go we are logged into our
00:00:09
server
00:00:10
so i'm just going to close that
00:00:12
and let's continue with this new git
00:00:14
cache window
00:00:15
i'm going to do control l
00:00:19
and what is next on this
00:00:22
the next thing is
00:00:24
firewall setup so if you do want to
00:00:27
install
00:00:28
a control panel most of the times you
00:00:30
probably won't have to deal with the
00:00:31
firewall but just make sure make sure
00:00:33
that you have ufw installed
00:00:35
and i know on ubuntu 22
00:00:38
it's probably already there if i check
00:00:40
for the starters of vfw
00:00:43
it should tell me that either it's
00:00:44
enabled or disabled but i know it isn't
00:00:46
it is installed in ubuntu already
00:00:58
starter is inactive so we can enable ufw
00:01:17
firewall is active and enabled
00:01:19
since our ssh
00:01:21
what is the next thing
00:01:23
that we need to do here
00:01:24
after this we need to set up
00:01:28
we need to change the ssh port right
00:01:31
okay
00:01:32
so i'm going to allow everything that i
00:01:34
need to allow here
00:01:38
i'm not going to log out yet
00:01:40
so what i'm going to do
00:01:42
let me just first of all allow this
00:01:44
because i'm going to use this as my new
00:01:46
port
00:01:47
in the next section i'm going to be
00:01:50
disabling i'm going to change the ssh
00:01:52
port i'm going to allow
00:01:54
this port
00:01:56
and then
00:01:57
let's just do the default sudo
00:01:59
allow outgoing allowing coming i'm just
00:02:01
going to copy everything there
00:02:11
there we go so if you look at ufw status
00:02:21
we have one rule that is allowed
00:02:25
you can allow whatever you want to allow
00:02:27
in your traffic if you're going to
00:02:28
install a control panel you don't really
00:02:30
have to set up all the rules just ensure
00:02:32
that shift w is already installed and
00:02:34
enabled
00:02:35
because most control panels will add the
00:02:37
rules that they need if they need a port
00:02:39
they will allow that port
00:02:42
for instance if you under if you enter
00:02:44
tutorials for
00:02:45
sdsp maybe to run wordpress i do have
00:02:48
that you can find that playlist
00:02:52
so i'm just going to leave this here but
00:02:54
if you want to allow anything you can
00:02:56
always allow you can always deny
00:03:00
if you want to delete something
00:03:01
you can always delete after you look at
00:03:03
the starters let's say
00:03:06
so if you look at sudo ufw status
00:03:08
numbered i'm just going to copy this
00:03:11
before you do that let's say maybe
00:03:14
let's say maybe i want to allow a
00:03:16
certain port
00:03:20
allow
00:03:21
part 705 right and then i will enter and
00:03:25
then
00:03:26
i'll do ctrl l to clear the screen
00:03:29
paste and go in there
00:03:32
you can see that when you do you have w
00:03:34
starters numbered it's going to give the
00:03:36
numbers for the different parts so maybe
00:03:38
you want to delete this rule number two
00:03:40
you can delete it
00:03:42
sudo
00:03:44
ufw
00:03:46
delete
00:03:48
rule number two
00:03:56
rule deleted so if you do status again
00:04:02
you'll see that the one is deleted maybe
00:04:04
you have to delete three as well
00:04:06
you can delete three
00:04:13
yes enter the file is basically about
00:04:16
allowing and disallowing stuff so if you
00:04:17
have ports that you don't want people to
00:04:19
access you can disallow them if there
00:04:21
are any parts that are preventing you
00:04:22
from accessing various services you can
00:04:24
allow them that's basically what you can
00:04:26
use ufw for
00:04:29
let's move on to changing the ssh port
00:04:32
and we're going back to our sshd
00:04:34
configuration file and this time around
00:04:36
let's use nano so that you can also see
00:04:38
how nano works if you're new to this
00:04:41
so sudo nano and then we're going to
00:04:43
edit this as a search configuration file
00:04:45
and instead of the ssh configuration
00:04:46
file we're going to
00:04:48
we're going to change the ssh port
00:04:52
and
00:04:53
since we've already allowed this in our
00:04:54
firewall we won't really need to do
00:04:56
anything after restarting ssh so let's
00:04:59
just go
00:05:00
and
00:05:02
paste that in there
00:05:05
let's look for yeah this port you can
00:05:08
see it is disabled when it is commented
00:05:10
out like this this means that the
00:05:11
default port is still 22 so if i change
00:05:14
it like that
00:05:18
we can change it to 70 59.
00:05:27
port 705.9 that will be our new ssh port
00:05:33
so on nano if you want to save you just
00:05:35
do control x
00:05:38
y
00:05:40
and then enter
00:05:42
control x press y and then enter and
00:05:44
then let's start ssh
00:05:48
so do service
00:05:52
ssh
00:05:55
restart
00:05:56
all right our port is 70 59 so let's go
00:05:59
and edit our login
00:06:02
so this is the one we've been using to
00:06:03
log in so let's add the port
00:06:07
hp you can add the port you can specify
00:06:10
the login port by
00:06:13
hp 7059
00:06:18
now note that this is a small p
00:06:21
this is a small p
00:06:22
at some point you're going to encounter
00:06:24
a different one which you may encounter
00:06:26
a different one which is scp scp is used
00:06:29
for copying files
00:06:32
so if you're going to use scp
00:06:34
to copy files make sure you're using
00:06:36
capital p instead of the small p if you
00:06:39
want to specify a port
00:06:43
so i will copy this let's try to log in
00:06:46
let's try to log in on a new git bash
00:06:48
window and i'm trying to log in because
00:06:51
i'm hoping that at some point i'm going
00:06:53
to encounter a certain permission denied
00:06:55
error which is very common in contabo
00:07:00
and when i do we'll see how to fix it
00:07:04
so you can see we have logged in
00:07:06
successfully with a new port
00:07:08
let me exit let me log out by doing exit
00:07:14
and if i log out
00:07:17
i'll do control l
00:07:19
and i try to
00:07:20
[Music]
00:07:21
log in without the port you're going to
00:07:23
experience an error
00:07:32
there you go ssh connect to host is
00:07:34
trying to connect using port 22 and the
00:07:37
connection has timed out and this is
00:07:39
also good because if people are trying
00:07:40
to access your ssh
00:07:42
your server via ssh and they try to use
00:07:45
port 22 they will not be able to get
00:07:47
access they will just get a timeout
00:07:48
error and that's a good thing for your
00:07:50
server security so we've done one thing
00:07:53
to at least improve our server security
00:07:56
by changing the port and adding ssh
00:07:58
authentication
00:08:00
via public and private key
00:08:03
now the next step let's see what's next
00:08:04
here
00:08:05
we've already changed that oh we're
00:08:07
almost done wow this is going
00:08:11
i fast
00:08:11
we've done all that now the next step is
00:08:13
you need to create a soft file but
00:08:15
on contable our memory is really not
00:08:17
that small this is optional
00:08:20
if you have a small server you can
00:08:22
create
00:08:23
you can create a swap file and i'm just
00:08:25
going to show you how you can do this so
00:08:26
that
00:08:27
you can do it if you have a smaller
00:08:29
server on contable if i do free
00:08:34
h you can see my memory total is 7.8
00:08:37
gigabytes
00:08:40
so for me i chose the 8gb ram
00:08:43
i've used that so
00:08:46
okay so let's say you have a smaller ram
00:08:48
you have a smaller server
00:08:50
and you want to run certain applications
00:08:52
that may consume a lot more ram that you
00:08:55
than you have and one of those is
00:08:57
probably apache you may need to add a
00:08:59
swap file so let's see how you can do
00:09:01
that
00:09:02
let's look at the basic rules for how
00:09:04
much
00:09:05
you should add for your swap file
00:09:08
if you have a server with 2gb of ram
00:09:13
you can add 4gb
00:09:15
okay so 2gb and below just add 4gb and
00:09:18
then starting from 4gb
00:09:20
you can add an equivalent if you have
00:09:22
4gb of ram you can add 4gb of
00:09:25
swap space
00:09:27
if you have
00:09:29
so just go like that up to about 8 gb
00:09:32
so i'm assuming at 8 gb maybe you have a
00:09:34
lot of things you want to run so at 8 gb
00:09:38
you should also just do about 8 gb of
00:09:40
ram
00:09:41
so starting from 8 and above maybe 9
00:09:44
there you can try to half it so maybe
00:09:46
have 10 gb of
00:09:48
ram you can do 5 gb
00:09:51
of swap file
00:09:54
you have 16 gb of ram you can do
00:09:57
8 gb of swap so you get the idea
00:10:00
so since we have 8 gb i'm going to do i
00:10:02
don't really need to do the hdb i'm just
00:10:04
going to do four because i don't really
00:10:06
want to run anything on this server i'm
00:10:07
just doing it for an example but if
00:10:09
you're running something in production
00:10:11
you can go with eight or even six
00:10:15
so i'm going to allocate
00:10:17
so this is the amount of giga gigabytes
00:10:20
that you're going to allocate to your
00:10:21
swap file for me i'm going to allocate
00:10:25
i'm going to allocate for
00:10:27
i will paste in that
00:10:30
and i want to put in 2gb
00:10:34
i want to switch 2gb to
00:10:37
4gb
00:10:40
and i will enter
00:10:43
and uh
00:10:45
all right so we've created that file
00:10:49
and then the next step let's make that
00:10:50
file
00:10:51
let's give it permissions for 600
00:10:54
so that only the root user
00:10:56
has the permission
00:11:00
change the permission
00:11:02
so make you can give it a different name
00:11:04
if you want to okay
00:11:07
this is the name of the swap file you
00:11:08
can change its name to whatever you want
00:11:11
to
00:11:12
you don't have to use the one i'm using
00:11:13
here you can change the name
00:11:16
you can even change the location maybe
00:11:17
you want to put it under root you can
00:11:19
just put there slash root slash
00:11:22
my ubuntu swap file
00:11:25
convert the created file to a swap so
00:11:27
this is what is going to make it a swap
00:11:28
file and then this is going to turn the
00:11:31
swap on
00:11:32
so even before we move
00:11:34
any further let's just see if we have
00:11:36
any swap on
00:11:42
so you can see
00:11:43
at this point you don't have any swap
00:11:45
file
00:11:46
so this is one thing i should have done
00:11:47
in the beginning just to confirm whether
00:11:49
i have a swap file because there are
00:11:50
certain
00:11:51
vps providers that will create the swap
00:11:54
file for you
00:11:55
in advance and you but you can always
00:11:57
add another one
00:12:00
this is going to convert this into a
00:12:01
subfile that is recognized by the system
00:12:03
and then swap on is going to
00:12:05
it's going to turn the swap on
00:12:08
so paste enter
00:12:12
so there we go so right now if you do
00:12:13
sudo swap on
00:12:15
we'll see that we have a soft file
00:12:17
called my ubuntu soft file and it has a
00:12:19
size of 4gb
00:12:23
the next thing is we need to add that
00:12:25
file into the etsy
00:12:27
f stub so when we add it into the f stub
00:12:29
it means it lets the system know that
00:12:32
there is a memory that they need to
00:12:33
register when they log when the system
00:12:35
restarts
00:12:37
so this is just to make sure that when
00:12:38
the system restarts
00:12:40
this is being recognized as it's being
00:12:42
recognized as a memory location for the
00:12:44
system
00:12:45
let's come back here and we're just
00:12:47
going to copy this and we're going to
00:12:48
add make sure that every place where
00:12:50
this is if you change the name of your
00:12:52
swap file you change it there as well
00:12:55
but you don't really have to
00:12:58
you can just use the same name i'm using
00:13:00
there
00:13:01
i'll do i to edit
00:13:07
press enter
00:13:13
you can let's not add it above this
00:13:16
let's add it
00:13:19
at the end of this
00:13:22
enter
00:13:24
and then i'll do shift inside
00:13:27
and then i'll press escape
00:13:32
and then shift zz to save
00:13:37
all right so as i said if you don't use
00:13:39
veeam just use nano
00:13:41
so you know what let's just confirm this
00:13:43
if we restart the server
00:13:45
we see if our swap is working so i'm
00:13:46
going to do exit
00:13:56
i didn't even restart let me restart the
00:13:58
server i'll just do reboot to restart
00:14:00
the server
00:14:01
if i do that let me copy the password
00:14:04
because i'm going to use sudo
00:14:09
wait for the server to restart and then
00:14:10
we're going to
00:14:12
we're going to see if our file is
00:14:14
available
00:14:17
so just giving it time to restart let's
00:14:19
just check if it is ready
00:14:22
is it ready
00:14:26
there we go
00:14:27
okay let's do swap on to see if also
00:14:30
file is active
00:14:38
paste and enter and there we go also
00:14:40
file is still there
00:14:43
all right so we've done this for file
00:14:44
what is the next step
00:14:46
the next step change the server host
00:14:48
name yeah this is actually very
00:14:49
important if if you're setting up this
00:14:51
server and you will be sending mail this
00:14:53
is very important make sure you do this
00:14:55
so we're going to do change the server
00:14:57
host name next for ubuntu
00:15:02
so this will be the server hostname if
00:15:03
you want to send mail make sure that
00:15:05
whatever you're using as your sub you're
00:15:07
using as your host name is a fully
00:15:10
qualified domain name a fully qualified
00:15:12
domain name is a subdomain
00:15:15
a subdomain or a full domain and the
00:15:17
domain when you add
00:15:19
dns records to it it can be accessed
00:15:21
that's what a fully qualified domain
00:15:23
name is so it has to be a registered
00:15:26
domain name
00:15:27
that can be accessed when you add dns
00:15:30
records to it
00:15:33
so we're going to change the server host
00:15:36
name
00:15:38
let me put this at the top
00:15:41
and our host name let's say i want to
00:15:44
use
00:15:46
panel
00:15:48
panel x
00:15:50
dot
00:15:51
bizanosa.com
00:15:58
i will copy
00:16:01
and bring it here
00:16:03
paste
00:16:04
enter
00:16:06
so the hostname is changed right now if
00:16:08
if i check the host name
00:16:13
it should bring this
00:16:15
but that's not the end of it you still
00:16:16
need to change it inside of the host's
00:16:19
file now instead of this host file this
00:16:21
is actually the one that's more
00:16:22
important because when you're running
00:16:24
something like exam exam is going to
00:16:26
look at what value is inside here and
00:16:28
that's what it's going to send out as
00:16:29
the sender of your mail
00:16:32
so we'll come here and we're going to
00:16:34
edit the hosts file
00:16:40
paste
00:16:41
enter
00:16:42
all right i can see contact already
00:16:44
added some details here so we added it
00:16:47
added that well and good we're going to
00:16:49
change our host name there so this is
00:16:51
going to be the host name that we set up
00:16:53
and then this is going to be the alias
00:16:55
and then for our ip as well we're going
00:16:57
to change the hostname
00:16:59
and the alias
00:17:01
so this is just an alias and this is
00:17:02
what when you log into your server
00:17:04
you'll see
00:17:05
so let us copy our host name
00:17:08
which was panel x dot visanosa.com
00:17:12
we're going to go into
00:17:14
the first one which is this so this is
00:17:16
like the system hostname
00:17:18
so this is important you can see it's
00:17:20
dot 1.1 so don't change the 14.01
00:17:22
because this is a defined localhost
00:17:26
for our server so the server must know
00:17:28
the localhost is that but the 2.1 we let
00:17:31
any other application that wants to use
00:17:33
this that that is our localhost name
00:17:36
and then our ip as well when anything
00:17:38
tries to access it it will be shown that
00:17:40
the hostname is what we set there and
00:17:43
that will not be the end of it there
00:17:44
will be still one more thing that you
00:17:45
need to do and this is true for
00:17:47
whichever
00:17:48
vps provider you're using
00:17:54
so i'm going to do shift insert to paste
00:17:58
and then on the other end
00:18:04
let me just press i'll just press
00:18:06
tab
00:18:09
and we're going to add panel x
00:18:14
and of course we need to delete this
00:18:18
so the next time you reload your server
00:18:20
and you log in you will see that your
00:18:22
server is called panel x
00:18:25
so let's come down again and we need to
00:18:27
change it for our ip
00:18:43
shift insights
00:18:46
let's do tab
00:18:49
press tab
00:18:54
delete
00:18:55
that
00:18:56
all right
00:18:57
then we're going to save control x
00:19:01
y
00:19:04
enter
00:19:06
so
00:19:06
[Music]
00:19:08
at this point i'm hoping that everything
00:19:10
is going to work well
00:19:12
because there's an error i'm hoping to
00:19:13
encounter because i want to deal with
00:19:15
that error but if i don't encounter it
00:19:17
well and good no problem
00:19:19
so let me just reboot the server
00:19:24
and then we're going to log in and
00:19:27
once you log in you will see that our
00:19:29
new hostname has changed and it will no
00:19:31
longer be that
00:19:36
so i'm hoping the server is already
00:19:37
started
00:19:39
if it is not it's just going to give us
00:19:41
an error and then we're going to try
00:19:43
again
00:19:45
there we go the server started and
00:19:46
everything worked well
00:19:48
ctrl l
00:19:49
now the next step is once you change
00:19:51
your host name you can see the host name
00:19:53
has changed once you change your host
00:19:55
name the next step is for you to go into
00:19:56
contable dashboard
00:19:58
go into the control dashboard and then
00:20:00
somewhere here you're going to see
00:20:02
reverse dns if you want to use your
00:20:04
website for hosting
00:20:06
so let me login if you want to use your
00:20:07
server for hosting actual
00:20:10
website and you want to send mail as
00:20:12
well from your server
00:20:14
you'll need to change your reverse dns
00:20:15
on contable as well
00:20:17
that way when you do a reverse check it
00:20:19
will show that your host name is what
00:20:21
you set
00:20:24
to change the host name in your contable
00:20:26
dashboard so that it can reflect when
00:20:29
people do our dns checks you need to
00:20:31
come here under reverse dns and then
00:20:33
you're going to copy
00:20:35
you are going to copy
00:20:37
your new host name
00:20:38
and then you're going to edit
00:20:41
the new hostname
00:20:42
to match with your ip
00:20:45
paste
00:20:46
save so once you do something like this
00:20:49
and you copy your ip address
00:20:51
and you check on
00:20:54
let's just do on our dns check
00:21:04
our dns check uh oh i i didn't want to
00:21:07
use this but let's just use this paste
00:21:11
and let's start and
00:21:13
so you can see
00:21:14
the lookup result says come back as that
00:21:16
so this is actually good because
00:21:18
if your server is not in any sperm
00:21:21
anti-spam directories then you can send
00:21:24
mail so if it is not blacklisted you can
00:21:26
send mail safely and it would go it
00:21:28
would go into your recipient's mail
00:21:30
provided you've set up your server well
00:21:32
and one of the easiest way to set up a
00:21:34
mail server you can use something like
00:21:37
sdscp it has a mail server built in so
00:21:40
you can just install sjsp and mail will
00:21:42
automatically will work out of the box
00:21:45
if you're using cloudflare make sure you
00:21:47
also add the txt records for the dkm and
00:21:51
the spf records add them onto
00:21:53
them onto your cloudflare dns records
00:21:55
and that's going to try and ensure that
00:21:58
your mail your mail always go into the
00:22:00
recipient's inbox instead of going into
00:22:02
the spam folder
00:22:05
so that is done what is next in our
00:22:07
server setup
00:22:10
set the time zone this is easy on ubuntu
00:22:12
if you're following along along on
00:22:14
debian then you need to install tz data
00:22:17
just do sudo apt
00:22:19
install tz data
00:22:23
but since we are on ubuntu i know this
00:22:25
is already installed in ubuntu 2204 so
00:22:28
i'm just going to come in here
00:22:30
and i'm going to paste that
00:22:33
and we can configure our time zone
00:22:35
and of course i need my sudo password
00:22:39
paste
00:22:40
enter
00:22:41
and i will choose africa
00:22:47
[Music]
00:22:49
nairobi city i'll just press n to go
00:22:52
to
00:22:53
n
00:22:55
press enter and my time zone has now
00:22:57
changed
00:22:59
and if i do that
00:23:03
it will tell me my time zone is now east
00:23:06
african time
00:23:09
you can change it again to see if you
00:23:11
made any error right that was easy and
00:23:14
fast
00:23:15
now the next and the last step is
00:23:16
setting up automatic updates open
00:23:18
automatic updates will save you a lot of
00:23:20
hassle i'm telling you if you set this
00:23:22
up you don't really have to go back to
00:23:24
your server you can even stay away from
00:23:25
your server for a whole year and
00:23:27
everything will just automatically
00:23:28
update itself
00:23:30
now there's a part of this that is not
00:23:31
available and i may do a video about
00:23:33
this in future and that is for adding
00:23:35
four third-party applications let's say
00:23:37
you install something like php and you
00:23:39
know php is not available in the
00:23:42
in the repository for ubuntu
00:23:44
by default you have to get it from some
00:23:46
third party so that's probably where the
00:23:48
issue is but that is also possible you
00:23:50
can add those repositories in your
00:23:52
automatic updates and that will save you
00:23:54
a lot of hassle everything will
00:23:56
automatically update
00:23:57
and you don't have to go to your server
00:23:59
all the time to check if there are any
00:24:01
updates
00:24:08
okay we don't have any updates
00:24:11
ctrl l
00:24:13
i know on ubuntu 2204 this is probably
00:24:16
already installed but i'm just going to
00:24:18
do the confirmation but if you're
00:24:19
following on debian it's probably not
00:24:21
installed
00:24:23
and as i said you can follow the same
00:24:25
post if you have debian 11.
00:24:32
it was not installed there we go it is
00:24:34
now installed
00:24:36
ctrl l
00:24:38
now the next thing is
00:24:40
we're going to do
00:24:42
that and this is going to enable the
00:24:44
updates it can enable
00:24:47
priority updates and this is going to
00:24:48
set the update in motion so even at this
00:24:51
point if anything changes on ubuntu it
00:24:53
will be updated
00:24:57
paste
00:25:03
okay so this is a this is an issue that
00:25:06
i'm experiencing here on my site but
00:25:08
basically what's happening is this is
00:25:11
these are two hyphens so just follow the
00:25:13
video and i'm hoping you're patient
00:25:15
enough to follow the video
00:25:17
and when you get here you just put two
00:25:19
hyphens like that
00:25:22
and that's going to fix this issue
00:25:26
so i'm just going to do it again and i
00:25:29
will come back all the way here delete
00:25:31
and i will put two hyphens
00:25:35
enter and that's going to bring you this
00:25:37
asking you to enable unattended upgrades
00:25:40
automatically download and install
00:25:42
stable updates yes
00:25:45
there we go now that file has been
00:25:48
generated
00:25:49
and if you go to this file you can see
00:25:51
what's inside of it
00:25:54
copy you can just do cut
00:25:58
shift insert
00:25:59
enter and you'll see
00:26:02
the upped
00:26:03
periodic update package list it will
00:26:06
update one every day it will check for
00:26:07
the update
00:26:09
unattended upgrade
00:26:11
one so packages and unattended upgrade
00:26:14
every day they'll check for the updates
00:26:17
i'll do control l clear the screen and
00:26:19
then let's go and edit this file the 50
00:26:22
unattended upgrades and this is
00:26:24
important
00:26:25
it's going to allow us to add more
00:26:27
things into the automatic updates so if
00:26:30
you ever need to add anything here
00:26:32
any third party file any third party
00:26:35
updates you'll need to come and add them
00:26:36
inside of this file
00:26:43
so the unattended upgrades that are
00:26:45
allowed are this
00:26:47
and we also need to enable updates for
00:26:50
normal packages so i'm just going to
00:26:53
uncheck that
00:26:54
and that's going to enable this so any
00:26:56
updates for all our applications
00:26:59
anything that we install
00:27:01
that is available in the ubuntu
00:27:02
repository that can be updated there
00:27:05
this you don't really need
00:27:06
proposed yeah you can also enable this
00:27:12
you can also enable that
00:27:14
just leave only this
00:27:16
enabled and then
00:27:17
if in future you want to to enable a
00:27:20
repository that that's not here in
00:27:22
ubuntu a good example is php you can
00:27:25
always add it in here okay and i may do
00:27:28
a video for that if you need a video for
00:27:30
that let me know i'll do a video for
00:27:31
that i can even write a post for that
00:27:33
and show you how to do it but you'd just
00:27:36
add it in the same format
00:27:38
okay so the digital id
00:27:41
and then
00:27:42
the where it's coming from
00:27:45
okay
00:27:46
something like this you can add maybe
00:27:48
it's chrome you have google chrome
00:27:49
installed you can add it
00:27:52
like that in here okay so it's not the
00:27:54
same way on debian in as much as debian
00:27:57
and ubuntu are similar you'll see that
00:28:00
if you go to the 50 upgrades for debian
00:28:03
is a little bit different
00:28:05
for ubuntu this is how it is
00:28:07
let's just forget about that for now
00:28:10
we can go down and i can explain some
00:28:12
more things here so unattended upgrade
00:28:14
package blacklist maybe you don't want
00:28:16
to upgrade mariah db
00:28:20
let's say you don't want to upgrade
00:28:22
mariahdb i will press i to go into
00:28:24
insert mode if you don't want to upgrade
00:28:26
my db you can always add it here so
00:28:29
quotes quotes
00:28:31
and then you can put my idb inside here
00:28:34
[Music]
00:28:37
mariahdb will not be updated
00:28:39
automatically
00:28:42
maybe whatever these are you don't want
00:28:45
to update any of these packages
00:28:54
and then don't forget
00:28:56
don't forget to end
00:28:58
the statement okay
00:29:01
maybe for some reason you don't want to
00:29:03
update php
00:29:05
no even php is not available on the
00:29:06
repository so let's think of something
00:29:08
else maybe you don't want to update
00:29:10
python
00:29:18
so you can add python in there
00:29:19
[Music]
00:29:21
maybe you don't want to update packages
00:29:23
that start with python
00:29:24
so you can say buy whatever you don't
00:29:27
want any of those updated that's just an
00:29:29
example of what you can prevent from
00:29:31
updating
00:29:32
but of course i don't need any of this
00:29:34
so i'm just going to comment them out
00:29:37
i'm going to comment this one out as
00:29:38
well
00:29:41
and let's continue down the line
00:29:43
unattended upgrades they've released
00:29:45
also most of these things you can always
00:29:47
read whatever they're about and that
00:29:49
will help you
00:29:50
let me do escape
00:29:52
i don't want to edit anything in there
00:29:56
so unattended upgrades
00:29:58
all these items you can read the only
00:30:00
other thing that i need to look at here
00:30:02
is
00:30:03
where is it mail send mail i can say
00:30:05
send mail here
00:30:07
let's just add numbering so press escape
00:30:10
and
00:30:11
you can do
00:30:11
[Music]
00:30:16
you can set numbering just like that
00:30:18
setting you if you want to remove the
00:30:19
numbering you can just do set no new no
00:30:22
no
00:30:23
and that's going to remove the numbering
00:30:24
so here on line 75 you can see we have
00:30:26
this okay if you want
00:30:29
to receive mail
00:30:31
when updates occur
00:30:33
you can do that here
00:30:34
so let me press i to go into edit mode
00:30:40
and unattended upgrade mail
00:30:42
you can add your mail address in there
00:30:46
mail anyone you can add your mail
00:30:48
address in there
00:30:54
make sure that your server has
00:30:56
as a way to send mail if it doesn't have
00:30:58
a mail server it doesn't have a way to
00:31:00
send mail this is not going to work
00:31:07
and then automatic reboot
00:31:09
you can reboot to that confirmation but
00:31:10
this needs a certain package and you're
00:31:12
going to see how to install it i think i
00:31:14
skipped that bit
00:31:17
so here under reboot
00:31:19
you can make it true
00:31:21
after the update is run or you can
00:31:23
enable automatic reboot you need to
00:31:25
change this to true
00:31:31
you'll need to change this to true
00:31:35
all right so that's pretty much it for
00:31:36
this file you can read all this if you
00:31:38
want to know more about what is
00:31:40
available here most of them are
00:31:41
commented and they explained and if no
00:31:44
explanation is clear you can always go
00:31:46
online and search for what you need what
00:31:47
you're trying to learn third party
00:31:49
applications especially php you can add
00:31:52
that and i may do a video for that in
00:31:54
future if you need the video just let me
00:31:55
know i'll create it
00:31:57
for now let's say this is all we want to
00:31:59
update i'm going to do escape
00:32:01
to get outside of him and then i'm just
00:32:03
going to do shift z to save
00:32:08
the next thing was there's something i
00:32:09
didn't install
00:32:11
and it was yeah update notifier you need
00:32:14
to install this
00:32:15
on ubuntu i don't know if it's already
00:32:17
installed
00:32:20
paste
00:32:21
enter so this will allow you to
00:32:23
automatically
00:32:25
reboot the server
00:32:29
that's pretty much it at this point
00:32:31
you've done everything we needed to do
00:32:33
in this
00:32:34
initial server setup you have done
00:32:36
everything that you needed to do and one
00:32:38
thing that i know i added in this post
00:32:40
at some point was
00:32:43
if you need to run the service on demand
00:32:46
maybe you're experiencing any problems
00:32:49
you can always do a dry run copy
00:32:52
let's do a dry run for our updates
00:32:54
and it's going to tell us if there any
00:32:57
if it's unable to do it
00:32:59
so i can do
00:33:00
debug
00:33:03
and if there are any issues it's going
00:33:05
to tell you that something is unable to
00:33:08
update or
00:33:09
whatever or if you have any updates
00:33:15
so you see right now it's telling me
00:33:17
that this is unable to send mail
00:33:19
probably because i don't have exam
00:33:21
installed so i will have to install
00:33:23
something that is good no packages were
00:33:25
found that can be updated that is good
00:33:28
this means that everything is working
00:33:29
well
00:33:30
and you can just leave it to run and if
00:33:32
you want to run it right now you can
00:33:34
always run it with the
00:33:35
d flag so if you do the d flag it's
00:33:38
going to update everything right now so
00:33:40
if i did have any updates
00:33:45
i can just do dash d and it's going to
00:33:48
update but you can see it's telling me
00:33:50
that there are no packages that need to
00:33:52
be upgraded
00:33:55
that's all i can do
00:33:56
to help you do your initial server setup
00:33:59
we deployed the ubuntu definitely logged
00:34:01
in created the user ssh login disable
00:34:04
root root login firewall setup i spoke
00:34:07
about that changed the ssh port created
00:34:09
at created a swap file changed the
00:34:12
server host name setup auto yeah
00:34:14
everything has been done
00:34:15
the next step is for you if you want to
00:34:17
run wordpress you want to run magento
00:34:19
you want to run basically any php
00:34:21
applications just go with htcp very
00:34:24
lightweight nice control panel
00:34:27
very easy to use
00:34:29
so if you want to install stp let me
00:34:31
just show you how you can do that
00:34:33
so on this link down here
00:34:36
you can generate a script and for me i
00:34:38
usually encourage you to use engine x
00:34:41
and php fpm so when you're generating
00:34:43
the script just disable apache you can
00:34:46
install multi-php maybe you don't know
00:34:47
what you want to run maybe you want to
00:34:49
run maybe you want to run something that
00:34:50
uses php 5.6 or php 7.4 you can run
00:34:54
multi-php and this is going to install
00:34:56
all the php versions you if you don't
00:34:58
need any at some point you can always
00:35:00
uninstall them on the htcp dashboard
00:35:03
ftp you can use pro ftp or vsftp
00:35:06
i'll just leave it at vstp and then
00:35:08
named this is what you'll use for dns
00:35:11
dns if you want to handle dns and you
00:35:13
want to use your own own name servers
00:35:15
you can
00:35:16
do that using named make sure it is
00:35:18
installed and i do have a video for sdsp
00:35:22
dns setup i do have a video for that i
00:35:24
hope it shows up because i just
00:35:26
installed it
00:35:29
so i think i'm the one
00:35:31
i'm the one who posted that on
00:35:34
reddit but the video
00:35:35
we can find the link there
00:35:37
[Music]
00:35:41
so if you come to youtube this is a
00:35:45
video you can use this to set up sdsp
00:35:47
using cloudflare
00:35:48
or your personal name servers that is
00:35:51
available there
00:35:53
named install that mysql if you need
00:35:56
postgres you can install it exam that's
00:35:58
for sending mail dev code is also for
00:36:00
mail
00:36:03
this one also works with dovecote
00:36:07
clermov this is like an antivirus
00:36:10
and then spam assassin of course ip
00:36:12
tables that will be your firewall fail
00:36:15
to burn of course you need to install
00:36:17
fail to burn
00:36:18
and api if you want to activate the api
00:36:22
you can always reactivate it later on
00:36:23
but just leave it do not activate it
00:36:26
leave it unactivated
00:36:28
unless you want to create things on your
00:36:30
own you want to access the api but just
00:36:33
leave that unchecked
00:36:35
and then of course just for the
00:36:37
installation you never know your server
00:36:39
may experience some errors but if you
00:36:41
first installation it will be first to
00:36:43
be installed and most importantly you
00:36:46
change your port if you want to use
00:36:47
cloudflare
00:36:48
then change the port to cloudflare
00:36:50
acceptable ports
00:36:58
so network ports let's see which ports
00:37:00
cloudflare supports so http ports those
00:37:03
are the ones you can change
00:37:05
your cloudflare your htcp port to any
00:37:08
one of this okay
00:37:10
this seems like a good one just use that
00:37:13
2053
00:37:15
and then
00:37:19
change the pot there hostname you
00:37:21
already changed your host name add that
00:37:23
host name there the host name that we
00:37:25
changed it to
00:37:26
was that make sure that the one you put
00:37:28
there and then your email the email for
00:37:30
your admin user and that there and then
00:37:33
a password set a password there even if
00:37:35
you don't set a password you can always
00:37:37
come in here and at the end of this post
00:37:40
yeah yeah if you need to reset your
00:37:42
password on your ubuntu the password for
00:37:44
your admin user or whichever user on
00:37:46
http you can do it like that on ubuntu
00:37:48
2204 that is the password
00:37:51
write the password there
00:37:53
write the user there and you can change
00:37:56
the password for your user so if you
00:37:58
don't set a password or you forget the
00:37:59
password you can always change the
00:38:01
password
00:38:02
via ssh
00:38:04
and then this just leave that unchecked
00:38:07
you want to proceed
00:38:09
come in here
00:38:10
[Music]
00:38:11
copy that run that on your ssh and then
00:38:14
run this on your ssh and then log in
00:38:17
this pretty much should end this
00:38:19
tutorial for how to deploy
00:38:24
and do an initial ubuntu 2204 setup on
00:38:27
contable
00:38:29
let me just try and
00:38:32
reboot the server and see if there are
00:38:33
any issues logging back in
00:38:39
if you have an issue where you're unable
00:38:41
to log back in
00:38:43
i did a video about how to log in via
00:38:45
vnc when you log in using vnc
00:38:48
you can always
00:38:50
figure out what the problem is normally
00:38:52
you can just go into your sshd
00:38:54
configuration file see if there is
00:38:55
anything there that is disallowing you
00:38:57
from logging in and you can also see if
00:39:00
the ssh port
00:39:02
is allowed and you can also check if ssh
00:39:05
is running you can just do something
00:39:06
like ssh
00:39:08
service ssh
00:39:10
starters and that will show you if ssh
00:39:12
is running so you can see after setting
00:39:15
up the ssh key login is pretty much a
00:39:17
breeze you won't really have any much
00:39:19
problems logging in because we have
00:39:22
changed the port
00:39:23
we have also disallowed password
00:39:25
authentication so this is good for your
00:39:27
server and we've also disabled root user
00:39:30
from logging in
00:39:31
so that's pretty much it for this video
00:39:33
if you do have any questions or you're
00:39:35
stuck just feel free to ask me in the
00:39:36
comments section
00:39:39
i'll see you in another video