VPS Init Setup
Configuring a VPS
Add your public key to VPS:
1
2
3
4
5
#In Local
pbcopy < ~/.ssh/id_ed25519.pub
#In VPS
nano ~/.ssh/authorized_keys # Add .pub content here
Update & Upgrade:
sudo apt update && sudo apt upgrade
Check if reboot required:
ls /var/run/reboot-required
Change root pw:
1
2
sudo su
passwd
Create non-root user & add to sudoers group:
1
2
useradd userName
usermod -aG sudo userName
Add your public key (local) to newUser’s authorized_keys file (in VPS) (Step 1)
SSH into the VPS as the created user
1
2
3
4
5
6
7
8
9
10
11
12
13
#Either Specify Input Key
ssh -i ~/.ssh/id_ed25519.pub userName@publicIP
#OR, manage with ssh config
nano ~/.ssh/config
#Config
Host serverName
HostName publicIP
Port 22
User userName
IdentityFile ~/.ssh/localPrivate.key
#And, login using serverName
ssh serverName
Disable password login & root login: Inside these files, set PasswordAuthentication no
1
2
3
4
5
6
7
8
9
10
sudo nano /etc/ssh/sshd_config
#Add
PasswordAuthentication no
PermitRootLogin no
sudo nano /etc/ssh/sshd_config.d/someCloudImageSettings.conf
#Add
PasswordAuthentication no
sudo service ssh restart
Firewall Config:
1
2
3
4
5
6
sudo ufw status numbered
sudo ufw show listening
sudo ufw allow 22/tcp
sudo ufw allow 'Nginx Full'
sudo service ssh restart #OR try systemctl daemon-reload
Site Files & Permissions: Point the subdomain from cloudflare to the serverIP using A record & Server IP (DNS Only)
1
2
3
4
5
6
7
sudo apt install nginx curl git -y
sudo mkdir -p /var/www/sub.domain.com/
#Change Permissions
sudo chown -R $USER:$USER /var/www/sub.domain.com
sudo chmod -R 755 /var/www/sub.domain.com
sudo echo 'hello world' > /var/www/sub.domain.com/index.html
Nginx Config:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
sudo nano /etc/nginx/sites-available/sub.domain.com
#In the file above, paste config, change domain & root dir
server {
listen 80;
server_name sub.domain.com www.sub.domain.com;
root /var/www/sub.domain.com/;
index index.html;
location / {
try_files $uri $uri/ =404;
}
}
#Create Symlink
sudo ln -s /etc/nginx/sites-available/sub.domain.com /etc/nginx/sites-enabled/sub.domain.com
sudo nginx -t
sudo systemctl restart nginx
#Open Nginx ports on UFW
sudo ufw allow 'Nginx Full'
Also, open port from VPS provider dashboard > networking > subnet > security > vcn > security rules > Add Ingress Rules: Source CIDR 0.0.0.0/0 & Destination Port Range 80, 443
Site should now be assessible via http using curl http://sub.domain.com
SSL Certificate using Let’s Encrypt
1
2
3
4
5
6
7
sudo apt install certbot python3-certbot-nginx -y
sudo certbot --nginx -d sub.domain.com -d www.sub.domain.com
#For Autorenwal of ssl cert using cron, add the following line
sudo crontab -e
#add the following:
0 3 * * * /usr/bin/certbot renew --quiet
Site should now be assessible via https using curl https://sub.domain.com , From cloudflare, you can enable proxy.