Explore

Security and Hardening

To protect the FDP and its data, the following security measures must be implemented.

🔐 Network Security

Firewall Configuration: The server's firewall (e.g., ufw on Ubuntu) must be enabled and configured to only allow traffic on necessary ports.

Allow: SSH (TCP/22), HTTP (TCP/80), HTTPS (TCP/443).

Restrict: All other non-essential ports should be blocked.

HTTPS Enforcement: A valid SSL/TLS certificate (e.g., from Let's Encrypt) must be installed to enable HTTPS. All HTTP traffic should be automatically redirected to HTTPS.

👤 Access Control

SSH Key Authentication: Password-based SSH login must be disabled. Access should be granted only through public key authentication.

Root Login: Direct root login via SSH must be disabled. Administrative tasks should be performed via a non-root user with sudo privileges.

Go to Backup and Disaster Recovery

⁠

Want to print your doc?
This is not the way.

Try clicking the ··· in the right corner or using a keyboard shortcut (

CtrlP

) instead.