Guide · 6 min read
Private server setup checklist
The first hour on a new VPS: lock down access, minimise logs and keep your identity separate.
Access
Switch to SSH key authentication and disable password login.
Change root's password, create a non-root sudo user and disable root SSH.
Network
Enable a firewall (ufw or nftables) and allow only the ports you need.
Consider WireGuard for admin access so SSH isn't exposed publicly.
Logs
Decide what your own services log. Reduce journald retention and web server access logs if you don't need them.
Identity hygiene
Use a dedicated contact address for hosting. Pay with Monero for the strongest payment privacy. Don't reuse usernames that link back to your real identity.
Put it into practice
A VPS S plan is enough for most guides.