I will harden and secure your linux vps with a full security report
Linux and Windows System Administrator, Docker, Ansible
About this Gig
Your new VPS comes wide open by default: password login enabled, root exposed, no firewall, no protection against bots scanning the internet for weak servers.
I harden your Linux server (Debian, Ubuntu, CentOS, Rocky, or AlmaLinux) against the most common automated attacks.
What you get (by package):
- SSH locked to key-only login, root login disabled
- Firewall configured for only the traffic you need
- Fail2Ban blocking repeated failed logins
- Full system update (Standard & Premium)
- Written report of every change (Standard & Premium)
- nmap port scan to confirm nothing unexpected is exposed (Premium)
For developers, small businesses and self-hosters who just rented a VPS and want it locked down before deploying anything important.
Not included: app-level fixes, incident response for already-hacked servers, SELinux policy work on RHEL-family distros, Windows servers.
Root/sudo SSH access required before I start.
Server:
Virtual private server
•
Other
Operating system:
Linux
My Portfolio
Other Support & IT Services I Offer
FAQ
Do you need root access to my server?
Yes, working SSH access with root or sudo privileges. I don't need any other account passwords, only server access.
Will this affect my website or app?
No, if it's running correctly. I only harden the OS layer (SSH, firewall, Fail2Ban), not your app code or database.
Do you support CentOS, Rocky Linux, or AlmaLinux?
Yes, for SSH, firewall and Fail2Ban. I don't configure SELinux policies on these distros yet, message me first if you need that.
My server has already been hacked, can you help?
This gig is preventive hardening, not incident response. Message me before ordering so I can point you in the right direction.
What if I get locked out after the changes?
I test SSH access before completing delivery to make sure you're not locked out, and I document the original config for rollback.
Can you also fix bugs in my app?
That's outside this gig's scope. Message me and I can quote it separately if it makes sense.
How long does it take?
Delivery time is listed per package (2-3 days), but hands-on work is usually 1-3 hours once I have access.

