I’m running Ubuntu 20.04 Server on my droplet along with Nginx. Should I install anti-virus software like ClamAV as in the following link? Is it essential or recommended? I’m also utilizing a fw and Cloudflare DNS proxy with their fw and scanning enabled.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
It is essential to secure your droplet, however running malware software is not definitely a must, but it is still a good thing to do.
I’ll highly recommend checking our tutorial An Introduction to Securing your Linux VPS
Usually, clamd/clamv is designed for e-mail scanning on mail gateways and if you’re planning to send/receive emails using the droplet you can install it by following our article.
I can recommend using software like Linux Malware Detect which is a malware scanner for Linux.
Hope that this helps!
It’s not essential but it’s a good idea. Having said that, what it’s essential is to secure the Droplet itself doing some good practises. As you already have a few suggestions I won’t go over them in detail but give you a list of what I believe it’s best:
Most vulnerabilities leading to the hacking of a Server are from outdated software. It can be your PHP version, NodeJS version, Nginx version, a vulnerability from your Application, and so on. As such, I’ll recommend always keeping everything up to date. This is the best sort of defense.
Want to learn more? Join the DigitalOcean Community!
Join our DigitalOcean community of over a million developers for free! Get help and share knowledge in Q&A, subscribe to topics of interest, and get courses and tools that will help you grow as a developer and scale your project or business.
Sign up now
I personally would follow other best practices as @alexdo already mentioned. I could also suggest a few more resources:
ufwor a Cloud Firewall:
Hope that this helps!