Hallo,
I have configured the Cloud in the following way:
Step 1 - I installed Linux, nginx, MySQL, PHP (LEMP) as shown in this guide:
Steep 2 - I installed Phpmyadmin as shown in this guide:
Cloud on I will use a site based on Wordpress.
With this configuration, the server is secure? What safety measures should I install to increase security? I'm worried.
Thank you so much!
One of the most important things you can do in order to keep WordPress safe is make sure it is kept up to date. Many websites get compromised by using known exploits that have already been fixed. People scan the internet looking for older versions of software to use the known vulnerabilities.
Keeping everything else on the server up to date is also important. You should regularly log in and apply security updates on the server.
Some more general tips:
Along with the advice above about ssh-keys change the port that ssh listens on. On a debian system the setup is in /etc/ssh/sshd_config. Should be the same on other flavors of Linux. Also you may want to install a firewall like shorewall to shut down all ports that you don't use just in case there is a mistake in a setting somewhere that would open up a service to the outside by mistake. Also look into ssh port forwarding that would allow you to connect to services that you have blocked to the outside over a secure link.
Hi, sorry for my quick response
I was used many aplicable tips form these links:
http://www.andrewault.net/2010/05/17/securing-an-ubuntu-server/
http://blog.al4.co.nz/2011/05/setting-up-a-secure-ubuntu-lamp-server/
http://www.tecmint.com/linux-server-hardening-security-tips/
i personally use this plugin in my WP.
http://wordpress.org/plugins/all-in-one-wp-security-and-firewall/
Or
https://wordpress.org/plugins/better-wp-security/
You might want to read the following guide:
https://www.digitalocean.com/community/tutorials/how-to-use-ssh-keys-with-digitalocean-droplets
When I checked my server logs, I am receiving more than 300 login attempts per hour; it will someday get through. Using keypairs instead of password based login eliminates this risk.