We are happy to announce that Vesta is back under active development as of 25 February 2024. We are working on v1 candidate and expect to engage more with the community over the coming months. We are committed to open source, and we encourage contributors to help us build the future of Vesta.
What to do before installing Vesta CP? Topic is solved
-
- Posts: 27
- Joined: Wed Jan 03, 2018 5:57 pm
- Os: Debian 8x
- Web: apache + nginx
What to do before installing Vesta CP?
Hello,
I've just installed a new VPS with Debian 9. I plan to use VestaCP on it but I have just a simple question:
Now that Debian 9 is installed, do I have to do/configure something before installing Vesta? Or, can I just install it right after Debian 9.
My question is mostly about security.
Thank you very much.
I've just installed a new VPS with Debian 9. I plan to use VestaCP on it but I have just a simple question:
Now that Debian 9 is installed, do I have to do/configure something before installing Vesta? Or, can I just install it right after Debian 9.
My question is mostly about security.
Thank you very much.
Re: What to do before installing Vesta CP?
Hi,
use clean OS to install vesta, then you can do some security hardening.
use clean OS to install vesta, then you can do some security hardening.
-
- Posts: 27
- Joined: Wed Jan 03, 2018 5:57 pm
- Os: Debian 8x
- Web: apache + nginx
Re: What to do before installing Vesta CP?
Here are many things for security hardening, but not all are good for users ;)
VestaCP is quite secure, but additional you can:
Disable mysql/mariadb remote connections
Add to my.cnf "local-infile = 0"
Check firewall rules
Disable ssh password logins, and use only keys
Disable root login (use other user for login to server and then suid to root user, or use sudo)
Disable dangerous php functions (You can try read this article: https://www.cyberciti.biz/tips/php-secu ... orial.html)
Use SSL for panel and domains (letsencrypt)
AND etc: https://lmgtfy.com/?q=linux+server+security+hardening
VestaCP is quite secure, but additional you can:
Disable mysql/mariadb remote connections
Add to my.cnf "local-infile = 0"
Check firewall rules
Disable ssh password logins, and use only keys
Disable root login (use other user for login to server and then suid to root user, or use sudo)
Disable dangerous php functions (You can try read this article: https://www.cyberciti.biz/tips/php-secu ... orial.html)
Use SSL for panel and domains (letsencrypt)
AND etc: https://lmgtfy.com/?q=linux+server+security+hardening
-
- Posts: 27
- Joined: Wed Jan 03, 2018 5:57 pm
- Os: Debian 8x
- Web: apache + nginx
Re: What to do before installing Vesta CP?
That is perfect, thank you very much for your fast answer!
Re: What to do before installing Vesta CP?
You will require a fresh Ubuntu 16.04 machine with at least 1 GB of RAM.
A valid DNS name pointing its A record to the IP address of your Ubuntu machine.
Configuring FQDN of the host.
A valid DNS name pointing its A record to the IP address of your Ubuntu machine.
Configuring FQDN of the host.