Find guides, tutorials, and documentation to help you get the most out of CubePath services.
Showing 14 of 14 guides
Install the ModSecurity WAF with the OWASP Core Rule Set on Apache or Nginx in Ubuntu 24.04, test that it blocks attacks and tune out false positives.
Find which ports your Ubuntu 24.04 server listens on with ss and netstat, check what the internet can reach with nmap, and close the ports you do not need.
Install and configure auditd on Ubuntu 24.04, write persistent rules to track changes to users, sudo, SSH and kernel modules, and search the logs with ausearch.
Harden a new Ubuntu 24.04 server step by step: automatic updates, key-only SSH, UFW, Fail2Ban, kernel settings, auditd and a Lynis audit to verify the result.
Install and configure Fail2Ban on Ubuntu 24.04 to ban IPs that brute force SSH and Nginx logins, with incremental bans, a custom filter and IP management.
Install ClamAV on Ubuntu 24.04, keep signatures updated with freshclam, scan files with clamd, and schedule a daily malware scan with a systemd timer.
Install Lynis from the CISOfy repository on Ubuntu 24.04, run a security audit, read warnings and suggestions, fix findings and schedule weekly audits.
Audit an Ubuntu 24.04 server by hand: check updates, users, sudo, SSH, open ports, firewall, file permissions, logs and cron jobs, with the exact commands.
Use OpenSSL on Ubuntu 24.04 to create keys and CSRs, issue self-signed and private CA certificates, convert formats, verify chains and check expiration.
Generate Ed25519 SSH keys, copy them to an Ubuntu 24.04 server, use ssh-agent and a client config, disable password logins and rotate or revoke old keys safely.
Require an SSH key plus a TOTP code from Google Authenticator for SSH logins on Ubuntu 24.04 using the PAM module, with scratch codes and a safe rollout plan.
Learn SELinux modes on Rocky Linux 9, then fix real Nginx denials with file contexts, booleans and port labels instead of disabling SELinux on your server.
Write, test and enforce an AppArmor profile on Ubuntu 24.04: load it in complain mode, refine it with aa-logprof, enforce it and read denials in the kernel log.
Encrypt a secondary disk with LUKS2 and cryptsetup on Ubuntu 24.04, mount it manually or at boot with a key file, manage key slots and back up the LUKS header.
