Patrick Domingues

Discover the key post-installation actions for your Ubuntu Server 22.04 installation. Follow these 10 vital steps for enhanced configuration and security.

Introduction

Congratulations on installing Ubuntu Server 22.04! As one of the most popular Linux distributions, Ubuntu Server offers a robust and reliable platform for your server needs. However, the installation is just the first step towards setting up a secure and optimized server environment. In this article, we will explore the ten essential things you must do after installing Ubuntu Server 22.04 to enhance its performance, security, and functionality.

1. Update System Packages

The first and most crucial step is to update your system packages. By keeping your server up to date, you ensure that you have the latest security patches, bug fixes, and software improvements. To update your system packages, open the terminal and run the following command:

sudo apt update && sudo apt upgrade -y

This command will fetch the latest package information and upgrade all installed packages to their latest versions. Remember to periodically run this command to stay up to date with the latest software releases.

2. Secure SSH Access

SSH (Secure Shell) is a common method used to remotely access servers. To enhance the security of your Ubuntu Server, it is essential to secure SSH access. Start by editing the SSH configuration file:

sudo nano /etc/ssh/sshd_config

Within the file, you can make the following changes:

• Change the default SSH port to a non-standard port to reduce automated attacks.
• Disable root login by setting PermitRootLogin to no.
• Enforce key-based authentication by setting PasswordAuthentication to no.
• Optionally, restrict SSH access to specific IP addresses using the AllowUsers directive.

After making the changes, save the file and restart the SSH service:

sudo systemctl restart sshd

3. Configure Firewall

A firewall acts as a barrier between your server and potential threats from the internet. Ubuntu Server comes with a firewall called UFW (Uncomplicated Firewall) pre-installed. To configure UFW, follow these steps:

• Allow SSH access by running: sudo ufw allow ssh
• Enable the firewall: sudo ufw enable
• Check the status of UFW: sudo ufw status

By default, UFW allows outgoing connections and denies incoming connections. You can customize the firewall rules according to your specific requirements.

4. Create a Non-Root User

Using the root account for everyday tasks is not recommended due to security reasons. It is best practice to create a non-root user with sudo privileges. To create a new user, use the following command:

sudo adduser username

Replace “username” with the desired username for your account. Follow the prompts to set a password and additional information for the user. Once the user is created, add them to the sudo group to grant administrative privileges:

sudo usermod -aG sudo username

You can now log in as the newly created user and use sudo before commands that require root privileges.

5. Set Up a Firewall with UFW

The UFW (Uncomplicated Firewall) is a user-friendly way to manage your firewall rules on Ubuntu Server. It provides a simplified interface for configuring and managing iptables. Here’s how you can set up UFW:

• Check the status of UFW: sudo ufw status verbose
• Enable UFW: sudo ufw enable
• Allow SSH access: sudo ufw allow ssh
• Allow necessary services, such as HTTP (port 80) or HTTPS (port 443): sudo ufw allow http

Remember to adjust the firewall rules according to your specific requirements.

6. Install and Configure Fail2Ban

Fail2Ban is a popular intrusion prevention tool that protects your server from brute-force attacks. It scans log files for suspicious activity and automatically blocks IP addresses that exhibit malicious behavior. To install Fail2Ban, use the following command:

sudo apt install fail2ban

Once installed, Fail2Ban’s default configuration is usually sufficient. However, you can fine-tune its settings by editing the /etc/fail2ban/jail.local file. For example, you can adjust the ban time or enable email notifications.

7. Install a Web Server (Apache or Nginx)

If you plan to host websites or web applications on your Ubuntu Server, you will need to install a web server. Two popular options are Apache and Nginx. To install Apache, run the following command:

sudo apt install apache2

For Nginx, use:

sudo apt install nginx

After installation, you can configure your web server according to your specific needs.

8. Enable Automatic Security Updates

Keeping your server up to date with the latest security patches is crucial for maintaining its security. Ubuntu Server provides a way to enable automatic security updates. Edit the /etc/apt/apt.conf.d/50unattended-upgrades file:

sudo nano /etc/apt/apt.conf.d/50unattended-upgrades

Uncomment the line that says "${distro_id}:${distro_codename}-security"; by removing the // at the beginning. Save the file and exit. Automatic security updates will now be enabled on your server.

9. Install a Monitoring System (Prometheus)

Monitoring your server’s performance and health is essential for proactive maintenance. Prometheus is a popular open-source monitoring system that can collect and visualize metrics from various services. To install Prometheus, follow the official documentation at https://prometheus.io/docs/prometheus/latest/installation/.

Once Prometheus is set up, you can configure it to monitor your server’s resources, such as CPU usage, memory usage, and disk space.

10. Backup Your Data Regularly

Regular backups are crucial to protect your data from loss or corruption. Ubuntu Server provides various tools to back up your files and databases. Some popular options include:

• rsync: A versatile utility for syncing files and directories locally or remotely.
• Duplicity: A backup program that supports encrypted incremental backups to local or remote storage.
• BorgBackup: A deduplicating backup program that creates space-efficient backups.

Choose a backup solution that fits your needs and set up regular backups to ensure the safety of your data.

FAQs

Q: How do I install additional software on Ubuntu Server?
A: You can use the apt package manager to install software on Ubuntu Server. For example, to install the git version control system, run sudo apt install git.

Q: Can I use Ubuntu Server for hosting a WordPress website?
A: Yes, Ubuntu Server is a popular choice for hosting WordPress websites. You can install the LAMP (Linux, Apache, MySQL, PHP) stack or use alternative solutions like Nginx and MariaDB.

Q: How can I access the Ubuntu Server remotely?
A: You can use SSH to remotely access your Ubuntu Server. On Windows, you can use software like PuTTY or Windows Subsystem for Linux (WSL) to establish an SSH connection.

Q: Is it possible to run a graphical user interface (GUI) on Ubuntu Server?
A: Yes, it is possible to install a GUI on Ubuntu Server. However, keep in mind that Ubuntu Server is designed for a command-line interface (CLI) environment, and running a GUI may consume additional resources.

Q: Can I upgrade from an older version of Ubuntu Server to 22.04?
A: Yes, you can upgrade from an older version of Ubuntu Server to 22.04. It is recommended to perform a backup of your data before starting the upgrade process. You can use the do-release-upgrade command to initiate the upgrade.

Q: How can I secure my Ubuntu Server against DDoS attacks?
A: To protect your server against DDoS (Distributed Denial of Service) attacks, you can use various techniques such as rate limiting, traffic filtering, or employing a dedicated DDoS protection service. Additionally, configuring a firewall and implementing anti-DDoS measures at the network level can help mitigate the risk.

Q: Can I install and run Docker on Ubuntu Server?
A: Yes, you can install and run Docker on Ubuntu Server. Docker provides a platform for containerization, allowing you to deploy and manage applications in isolated containers. Refer to Docker’s official documentation for instructions on installing and using Docker on Ubuntu Server.

Q: How can I secure my Ubuntu Server against unauthorized access?
A: To secure your Ubuntu Server against unauthorized access, you can follow best practices such as securing SSH, configuring a firewall, using strong passwords, implementing two-factor authentication, and regularly updating your system with security patches.

Conclusion

In this article, we explored ten essential things you must do after installing Ubuntu Server 22.04. By following these steps, you can enhance the security and functionality of your server. Remember to regularly update your system, secure SSH access, configure a firewall, create a non-root user, and implement necessary security measures. Additionally, consider installing a web server, enabling automatic security updates, setting up a monitoring system, and performing regular backups. By taking these steps, you can ensure a robust and optimized Ubuntu Server environment for your server needs.

I hope this article was helpful!  You can find more here: Ubuntu Tutorial Articles

Patrick Domingues

See Full Bio