Hello, @mhweb

There are other tweaks that you can implement in order to tight up the security. You can disable the PasswordAuthentication and also limit the root login to a certain amount of IP addresses. Tweak IP tables as well as using fail2ban and UFW.

I will recommend you to check this tutorial on how to secure your Linux VPS:

https://www.digitalocean.com/community/tutorials/an-introduction-to-securing-your-linux-vps

Hope this helps!

Regards,
Alex

Hi @mhweb,

You may enable a couple of things on your server to make it secure,

1. Setup new user and disable root login via SSH.
2. Disable Password Authentication, always use SSH tunnel.
3. Secure Mysql server
4. Secure Phpmyadmin (If you’re using)
5. Setup firewall to enabled and disable inbound and outbound network connections, (You should use Cloudflare as it provides additional securities including Firewall, DDOS protection)

If you’ll use the Cloudflare, no one could easily know your real IP address, However, it is possible to know, but it is like an extra layer of security.

Never open all network ports, use only selected port.