Linux Secure Web Server

A hands-on Linux and Cloud Security lab running on Ubuntu and Nginx.

Implemented Security Controls

• SSH public key authentication
• Root SSH login disabled
• Password authentication disabled
• Non-root administrative user with sudo
• UFW firewall
• Fail2ban SSH protection
• Nginx web server

Open Ports

• 22/TCP - SSH
• 80/TCP - HTTP
• 443/TCP - HTTPS

Next step: HTTPS / TLS.