Security is not a product, but a process. When you receive your new Ypsilon VPS, securing it should be your immediate priority.
Step 1: Disable Root Login
Never allow direct root access over SSH. Create a secondary user with sudo privileges and disable root login in /etc/ssh/sshd_config.
Step 2: Change the Default SSH Port
Change your SSH port from 22 to a random high port (e.g., 22456). This prevents automated bots from silently bruteforcing your server logs.
- Update sshd_config
- Restart sshd service
- Update your firewall rules
Step 3: Setup UFW (Uncomplicated Firewall)
Deny all incoming traffic by default, and only specifically allow ports you need (like 80 for HTTP, 443 for HTTPS, and your new SSH port).
