What you should do in your first 5 mins of a new server install

I'm a big proponent of changing the SSH port. That right there makes life a lot easier when dealing with brute force attempts.

You can also make an IP tables taste limit on that port.

My only excuse for not changing port is workflow, needing to add the flag or : on the address is too much :P

detaro 10y ago ↗

that's what the .ssh/config file is for

Wow, I never knew that was possible from the SSH config [0]. Thanks for the pointer! Time to update all of my settings!

You can define globals on your machine.

ssh $main or ssh $mail

Makes it even easier, don't need to remember domain, port, or user.

What you should do in your first 5 mins of a new server install (engineering.timbrook.im)