2 ms·
- "SSL": use lets-encrypt, save 11$/yr. (there were other gratis CAs before that). - "must use Mac or Ubuntu": what? - "must use vim (with as many plugins as
by Ao7bei3s 11y ago
- "SSL": use lets-encrypt, save 11$/yr. (there were other gratis CAs before that).
- "must use Mac or Ubuntu": what?
- "must use vim (with as many plugins as possibly)": what? Try a good IDE, like the ones from JetBrains, and you'll be amazed how much it does for you. Aren't you tired of doing refactorings like renaming variables with search/replace? (It even has an excellent VIM emulation, and I'm a heavy vim (real vim) user.)
- EV SSL cert: dubious advantages
- fail2ban, non-standard SSH port: Just disable password logins instead. fail2ban isn't all that useful for SSH. Non-standard SSH ports will keep your logs clean, but thats it.
- root login: just use "PermitRootLogin without-password" (prevents password login, allows ssh key login) and you're good. A modern Debian does this by default. "SSH access only"? What the hell are you talking about?
I stopped reading shortly after (80% due to lack of time, 20% lack of interest).