Basisinstallation Linuxkiste

adduser bb
adduser bb sudo
apt-get install sudo

sudo apt-get update
sudo apt-get dist-upgrade
sudo apt-get autoremove
sudo apt-get install vnstat git-core ntp ca-certificates apt-transport-https rsync unattended-upgrades cron wget curl nano logrotate htop
sudo apt-get clean

Auf Nodes im public Web ggf. noch zusätzlich

sudo apt-get install fail2ban

SSH-Port ändern

sudo nano /etc/ssh/sshd_config
sudo service sshd restart

Eigene CA-Zertifikate übernehmen
Kopieren nach /usr/local/share/ca-certificates (Wichtig: .crt als Extension)

sudo update-ca-certificates

/etc/apt/apt.conf.d/50unattended-upgrades anpassen

/etc/apt/apt.conf.d/20auto-upgrades erstellen und folgendes einfügen

APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Download-Upgradeable-Packages "1";
APT::Periodic::AutocleanInterval "7";
APT::Periodic::Unattended-Upgrade "1";