3 ms·

I can't claim to have been through it but this is sitting on my bookmarks folder and looks very useful: https://github.com/imthenachoman/How-To-Secure-A-Linux-S

I can't claim to have been through it but this is sitting on my bookmarks folder and looks very useful: https://github.com/imthenachoman/How-To-Secure-A-Linux-Server https://github.com/imthenachoman/How-To-Secure-A-Linux-Serve... My only tip I haven't seen mentioned here is be very careful using docker with ufw, as by default docker will effectively override ufw port restrictions if it is told to expose a port.

z9znz 4y ago
> by default docker will effectively override ufw port restrictions Thanks for that reminder. I discovered that accidentally last year with a toy project and it blew my mind! I still think that is a terrible bad default behavior… and I was disappointed to learn that root-defined UFW rules were not the final answer.