Is there a checklist for setting up a secure, optimised server?

Iptables is a must. <br>https://www.digitalocean.com/community/articles/how-to-setup-a-basic-ip-tables-configuration-on-centos-6 <br>(This tut will also work on debian and ubuntu) <br>No passwords for the ssh login, use private RSA keys!

There is no specific thing as it is all option steps you take yourself: <br> <br>for me I would go for this list: <br>1- securing ssh and hardening and use only SSH key to access WS <br>2- disabling root login <br>3- using iptables <br>4- port knocking <br>5- Fail2ban “you need to be very careful with that, otherwise, you will find yourself locked out” <br>6- using Intrusion Detection System <br> <br>and possibly the most important thing to protect the server itself is using mod_security for either Apache or Nginx <br> <br>and many others… <br> <br>you can find the list here: <br> <br>https://www.digitalocean.com/community/articles/an-introduction-to-securing-your-linux-vps

Thanks guys. You given me something to work with. <br> <br>Pretty new to this always had managed vps’s before, so just want to make sure I can at least do the minimum to get up and running and secure. <br> <br>Any further suggestions always welcome.