Add some notes about server hardening.

mblayman · Oct 6, 2024 · c2c1168 · c2c1168
1 parent def7042
commit c2c1168
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -122,6 +122,25 @@ Current strategy for migrating the database
 5. Run migrations.
 6. `uv run manage.py loaddata all-fixtures.json`
 
+### Server config
+
+1. Add ssh keys.
+2. Turn off passworth auth
+
+```
+/etc/ssh/sshd_config
+PasswordAuthentication no
+systemctl restart ssh
+```
+
+3. Firewall stuff.
+
+```
+ufw allow OpenSSH
+ufw default deny incoming
+ufw enable
+```
+
 ## Market Research
 
 This is my analysis of the market