Self-hosted GitHub Actions runner on a VPS
Register a self-hosted GitHub Actions runner on Ubuntu 24.04: dedicated user, checksum, config.sh, a systemd service, and the fork pull request risk.
#ubuntu-24-04
Filtering by topic #ubuntu-24-04 · clear
Restic backups: get your VPS data off the box
Restic sends encrypted, deduplicated backups from your VPS to another server or object storage, on a nightly timer, with a restore drill that proves it.
SSH key management basics
How SSH keys work and how to manage them: one ed25519 key per device, the permissions sshd demands, config Host blocks, and revoking a lost key.
Zabbix monitoring on Ubuntu 24.04
Install Zabbix 7.0 LTS on Ubuntu 24.04: add the repo, import the MySQL schema, wire up the nginx frontend and agent2, then fix every error the setup throws.
UFW firewall basics: set up a VPS firewall
UFW is the simple way to run a firewall on a VPS. Set a default-deny policy, allow only the ports you need, and turn it on without locking out SSH.
UFW and IPv6: the open door on your VPS
Your UFW rules and cloud firewall may only cover IPv4, leaving services wide open on IPv6. See why it happens on a VPS and how to close the gap.
Run a program as a systemd service on a VPS
A systemd service keeps your program running: start on boot, restart on crash, log to the journal. How to write one, add a timer, and harden it.
SSH hardening on a VPS
Lock down SSH on your VPS: switch to key-only login, disable root and passwords with a drop-in config, and layer Fail2ban and a VPN on top.
Ubuntu 24.04 unattended-upgrades: on by default?
Ubuntu Server 24.04 ships unattended-upgrades, but 20auto-upgrades turns it on. Automatic-Reboot stays false, and a dry run shows what it would install.
Install Fail2ban on Ubuntu 24.04: stop SSH bots
On Ubuntu 24.04 a plain apt install already bans SSH brute force. The fail2ban-client status sshd output proves it, plus the fix when Total failed stays at 0.