Need some guidance setting up a new LEMP droplet

Posted June 8, 2019 2.2k views
NginxLEMPUbuntu 18.04


I’ve been interested in setting up a personal website using the LEMP One-Click install offered by DO but i have some questions about it:

How ready for production does it come out of the box?

My doubts here linger for example if Nginx/Php are already optimized for production or if Fail2Ban is already setup to monitor all pre-installed software.

What steps are recommended post having the Droplet up/initial setup?

So my ideia is to do the additional steps suggested in the LEMP One-Click page, create a non-root user, add nodejs as an additional resource and then get the droplet “production ready”, which as far as my knowledge goes it probably goes around securing nginx and php (if not already done).

I’m sort of looking for guidance in any additional “standard” steps towards protecting the droplet, hence why i’m choosing to start with a bundle instead of a “from scratch” droplet.

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Submit an Answer
1 answer

Hi there @Pmma,

When setting up a web server, it is best to always assume that security measures are currently not in place and as such, you should verify that they are and set up anything that isn’t to your satisfaction in terms of protection.

When using the LEMP droplet, it might be worth referencing our Ubuntu 18.04 LEMP tutorial to ensure that the droplet has been pre-configured fully based on that guide. The tutorial also has some great additional links to next steps for getting your server ready for production usage.

Hope that helps!
- Matt.

by Justin Ellingwood
by Mark Drake
This tutorial details the process for installing and configuring the components that constitute a LEMP stack on an Ubuntu 18.04 server, including Nginx, MySQL, and PHP. It also includes instructions for testing that these components can communicate effectively and serve your content correctly.
  • Alright, i guess then i better just start with a fresh droplet and go through the whole process then. Thanks for replying.