Server Setup
After connecting to the server via SSH, Jem's first steps in setting up the server were to:
- Update and upgrade the software
- Create a new user
- Make the new user a super user
- Switch to the new user
- Enable login for the new user by pasting the public key you used in Digital Ocean to an
authorized_keys
file - Log out from root and log back in as the new user
- Disable root login by locking permissions to the
authorized_keys
file and modifying a login configuration file
# Update software
apt update
# Upgrade software
apt upgrade
# Add new user (e.g. adduser jem)
adduser $USERNAME
# Add user to "sudo" (superuser do) group
usermod -aG sudo $USERNAME
# Switch user
su $USERNAME
# Check sudo access (/var/log/auth.log generally requires sudo access)
sudo cat /var/log/auth.log
# Change to home directory
cd ~
# Create a new directory if it doesn't exist
mkdir -p ~/.ssh
# Create authorized_keys file and paste public key
vim ~/.ssh/authorized_keys
# cat fsfe2.pub on the public key you made on your local machine
# paste into file and save
# exit and log in with new username
exit
exit
ssh jem@000.00.000.000
# disabling the root user...
# Change file permissions...
chmod 644 ~/.ssh/authorized_keys
# Disable root login
sudo vi /etc/ssh/sshd_config
# ... then find and change the line:
PermitRootLogin no # was "yes"
# then restart
sudo service sshd restart