Security

Firewall

You should only allow access to necessary ports, like 22 (ssh), 80 (http), 443 (https), or you will risk data leakage and remote execution.

By default, script/setup.sh sets a port whitelist for ssh, http and https. If you have set up the server manually or using earlier setup script, make sure to set a port whitelist like this:

# Ubuntu port whitelist for ssh, http, https
sudo ufw allow ssh
sudo ufw allow http
sudo ufw allow https
sudo ufw logging on
sudo ufw enable