Archive project · devops
SSL & Security Hardening
Server security hardening covering Certbot HTTPS, firewall rules (UFW), fail2ban, SSH key auth, and automated certificate renewal.
- Certbot
- HTTPS
- UFW
- Fail2ban
- SSH
The Problem
Production VPS instances needed HTTPS, firewalling, and SSH hardening to reduce common attack surface.
Password SSH and open ports were frequent findings on newly provisioned hosts.
Tech Stack & Architecture
Certbot for HTTPS and auto-renewal, UFW firewall rules, fail2ban, and SSH key-only authentication.
Baseline rules default to deny and open only required service ports.
Key Results / Business Outcome
Hardened production servers with HTTPS, firewall, fail2ban, and secure SSH practices.
Certificate renewal is automated so HTTPS does not silently expire.