Replying to Avatar Mike Dilger ☑️

Unattended upgrades? iptables? ssh config lockdown?

I used to manage nearly a thousand websites running mostly on PHP and using parallels plesk. I grew to hate plesk. It doesn't respect system services, it overwrites them. It takes ownership of everything and forces you to do everything through plesk... and then fails to support everything you want to do.
72
nobody 1y ago

Haven’t had any issues so far. I don’t like unattended upgrades, so I won’t be doing that. The reminder to check SSH configs is a good one though. I did set up 2FA for web login, etc and set the firewall up.

Backups. I need to get automatic backups going. 😬

Reply to this note

Please Login to reply.

Discussion

Avatar
Mike Dilger ☑️ 1y ago

We had customers who got cryptolockered and they encrypted the backups as well as the main system. So do something to prevent that.

72
nobody 1y ago

Hmm. I was looking at an extension to dump backups to S3 compatible storage. I should be able to set up some sort of immutability depending on the vendor I think? 🤔