🛡️ Server Security
Welcome to the TokioStack VPS Security Guide — your structured, beginner-friendly path to hardening any virtual private server used for blockchain or backend infrastructure.
This guide breaks down all critical layers of server security, from login access to network protection and update monitoring.
🔐 Why Securing Your VPS Matters
A VPS that isn't secured can be:
- ❌ Hacked by brute-force bots
- ❌ Compromised by default credentials or exposed ports
- ❌ Used for spam, malware, or cryptojacking
By following this guide, you'll lock down your server against common attack vectors.
🧭 Recommended Security Workflow
✅ We strongly recommend following the steps below in this order, especially if you're new to server management.
1️⃣ User Setup
👤 Create a non-root user with sudo privileges.
This will prevent accidental damage and is safer than using root.
2️⃣ SSH Configuration
🔐 Generate a secure SSH key pair and disable password login only after verifying your key works.
📖 Set Up SSH Key Authentication
📖 Change SSH Port
3️⃣ Network-Level Security
🛡️ Activate a firewall using UFW and restrict incoming traffic.
Fail2ban adds protection against brute-force SSH attacks.
4️⃣ System Monitoring & Maintenance
🔎 Keep your system secure over time by applying updates and monitoring for changes.
🧠 Pro Tip
After each major change, always open a second terminal and test your new setup (SSH login, sudo, etc.) before logging out of the first. This prevents lockouts.
🎯 Harden once. Sleep better forever.
