Linux Server Hardening Script

Overview

Born from the need to consistently secure new Linux server deployments. This script automates the essential hardening steps that are typically done manually — reducing setup time and ensuring no security step gets skipped.

What I did

• Creates non-root users and disables root SSH access with enforced key-based authentication.
• Configures firewall rules and disables unnecessary protocols.
• Sets up Fail2Ban to block brute-force login attempts.
• Implements shared memory protection and hardens kernel parameters against common network exploits.

Highlights

• In use on 3 production servers running SaaS and e-learning platforms.