HAProxy TLS Termination on Debian 12

Step 1 – Combine cert + key

cat /etc/ssl/certs/example.com.crt /etc/ssl/private/example.com.key > /etc/haproxy/certs/example.com.pem
chmod 600 /etc/haproxy/certs/example.com.pem
openssl dhparam -out /etc/haproxy/dhparam.pem 2048

Step 2 – Config

global...

HAProxy TLS Termination on Gentoo Linux

Step 1 – Combine cert + key

cat /etc/ssl/certs/example.com.crt /etc/ssl/private/example.com.key > /etc/haproxy/certs/example.com.pem
chmod 600 /etc/haproxy/certs/example.com.pem
openssl dhparam -out /etc/haproxy/dhparam.pem 2048

Step 2 – Config

global...

HAProxy TLS Termination on NetBSD 10

Step 1 – Combine cert + key

cat /etc/ssl/certs/example.com.crt /etc/ssl/private/example.com.key > /etc/haproxy/certs/example.com.pem
chmod 600 /etc/haproxy/certs/example.com.pem
openssl dhparam -out /etc/haproxy/dhparam.pem 2048

Step 2 – Config

global...

HAProxy TLS Termination on OpenBSD 7.5

Step 1 – Combine cert + key

cat /etc/ssl/certs/example.com.crt /etc/ssl/private/example.com.key > /etc/haproxy/certs/example.com.pem
chmod 600 /etc/haproxy/certs/example.com.pem
openssl dhparam -out /etc/haproxy/dhparam.pem 2048

Step 2 – Config

global...

HAProxy TLS Termination on RHEL 9

Step 1 – Combine cert + key

cat /etc/ssl/certs/example.com.crt /etc/ssl/private/example.com.key > /etc/haproxy/certs/example.com.pem
chmod 600 /etc/haproxy/certs/example.com.pem
openssl dhparam -out /etc/haproxy/dhparam.pem 2048

Step 2 – Config

global
    ss...

HAProxy TLS Termination on Ubuntu 24.04

Step 1 – Combine cert + key

cat /etc/ssl/certs/example.com.crt /etc/ssl/private/example.com.key > /etc/haproxy/certs/example.com.pem
chmod 600 /etc/haproxy/certs/example.com.pem
openssl dhparam -out /etc/haproxy/dhparam.pem 2048

Step 2 – Config

global...

Harden SSH on AlmaLinux 9

Back up config

cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak

Key settings (/etc/ssh/sshd_config)

Port 2222
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
AllowUsers deploy alice
Protocol 2
ClientAliveInterval 600
ClientAliveCountMax 0
X11...

Harden SSH on Arch Linux

Back up config

cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak

Key settings (/etc/ssh/sshd_config)

Port 2222
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
AllowUsers deploy alice
Protocol 2
ClientAliveInterval 600
ClientAliveCountMax 0
X11F...

Harden SSH on Debian 12

Back up config

cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak

Key settings (/etc/ssh/sshd_config)

Port 2222
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
AllowUsers deploy alice
Protocol 2
ClientAliveInterval 600
ClientAliveCountMax 0
X11Fo...

Harden SSH on Gentoo Linux

Back up config

cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak

Key settings (/etc/ssh/sshd_config)

Port 2222
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
AllowUsers deploy alice
Protocol 2
ClientAliveInterval 600
ClientAliveCountMax 0
X1...

Harden SSH on NetBSD 10

Back up config

cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak

Key settings (/etc/ssh/sshd_config)

Port 2222
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
AllowUsers deploy alice
Protocol 2
ClientAliveInterval 600
ClientAliveCountMax 0
X11Fo...

Harden SSH on OpenBSD 7.5

Back up config

cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak

Key settings (/etc/ssh/sshd_config)

Port 2222
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
AllowUsers deploy alice
Protocol 2
ClientAliveInterval 600
ClientAliveCountMax 0
X11...

Harden SSH on RHEL 9

Back up config

cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak

Key settings (/etc/ssh/sshd_config)

Port 2222
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
AllowUsers deploy alice
Protocol 2
ClientAliveInterval 600
ClientAliveCountMax 0
X11Forwa...

Harden SSH on Ubuntu 24.04

Back up config

cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak

Key settings (/etc/ssh/sshd_config)

Port 2222
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
AllowUsers deploy alice
Protocol 2
ClientAliveInterval 600
ClientAliveCountMax 0
X1...

Install and Configure Postfix on AlmaLinux 9

Step 1 – Install

dnf install -y postfix mailx
systemctl enable --now postfix

Step 2 – /etc/postfix/main.cf

myhostname  = mail.example.com
mydomain    = example.com
myorigin    = $mydomain
inet_interfaces = all
inet_protocols = all
mydestination =...

Install and Configure Postfix on Arch Linux

Step 1 – Install

pacman -S --noconfirm postfix
systemctl enable --now postfix

Step 2 – /etc/postfix/main.cf

myhostname  = mail.example.com
mydomain    = example.com
myorigin    = $mydomain
inet_interfaces = all
inet_protocols = all
mydestination =...

Install and Configure Postfix on Debian 12

Step 1 – Install

DEBIAN_FRONTEND=noninteractive apt install -y postfix
systemctl enable --now postfix

Step 2 – /etc/postfix/main.cf

myhostname  = mail.example.com
mydomain    = example.com
myorigin    = $mydomain
inet_interfaces = all
inet_protocol...

Install and Configure Postfix on Gentoo Linux

Step 1 – Install

emerge --ask mail-mta/postfix
rc-update add postfix default && rc-service postfix start

Step 2 – /etc/postfix/main.cf

myhostname  = mail.example.com
mydomain    = example.com
myorigin    = $mydomain
inet_interfaces = all
inet_pr...

Install and Configure Postfix on NetBSD 10

Step 1 – Install

pkgin install postfix
echo 'postfix=YES' >> /etc/rc.conf && service postfix start

Step 2 – /etc/postfix/main.cf

myhostname  = mail.example.com
mydomain    = example.com
myorigin    = $mydomain
inet_interfaces = all
inet_protocols =...

Install and Configure Postfix on OpenBSD 7.5

Step 1 – Install

pkg_add postfix
rcctl enable postfix && rcctl start postfix

Step 2 – /etc/postfix/main.cf

myhostname  = mail.example.com
mydomain    = example.com
myorigin    = $mydomain
inet_interfaces = all
inet_protocols = all
mydestination =...

Install and Configure Postfix on RHEL 9

Step 1 – Install

dnf install -y postfix mailx
systemctl enable --now postfix

Step 2 – /etc/postfix/main.cf

myhostname  = mail.example.com
mydomain    = example.com
myorigin    = $mydomain
inet_interfaces = all
inet_protocols = all
mydestination = $myh...

Install and Configure Postfix on Ubuntu 24.04

Step 1 – Install

DEBIAN_FRONTEND=noninteractive apt install -y postfix
systemctl enable --now postfix

Step 2 – /etc/postfix/main.cf

myhostname  = mail.example.com
mydomain    = example.com
myorigin    = $mydomain
inet_interfaces = all
inet_proto...

Install Apache HTTP Server on AlmaLinux 9

Step 1 – Install

dnf install epel-release -y
dnf install -y httpd mod_ssl
systemctl enable --now httpd

Step 2 – Open firewall ports

firewall-cmd --permanent --add-service=http
firewall-cmd --permanent --add-service=https
firewall-cmd --reload

Step

Install Apache HTTP Server on Arch Linux

Step 1 – Install

pacman -Syu --noconfirm
pacman -S --noconfirm apache
systemctl enable --now httpd

Step 2 – Open firewall ports

ufw allow 80/tcp && ufw allow 443/tcp && ufw reload

Step 3 – Verify

curl -I http://localhost
apachectl -v

Main config...