https://stackharden.com/tags/host/Recent content in Host on StackHardenhttps://stackharden.com/og-default.pnghttps://stackharden.com/og-default.pngHugoenMon, 01 Jun 2026 00:00:00 +0000https://stackharden.com/checklist/vps-launch-security/Sat, 16 May 2026 00:00:00 +0000https://stackharden.com/checklist/vps-launch-security/A pre-launch checklist for any new internet-facing Linux VPS — pre-provision decisions, hardening, edge, data, backups, monitoring, and documentation, with NIS2 / ISO 27001 / GDPR control mapping per item.https://stackharden.com/guides/ssh-hardening/Sat, 16 May 2026 00:00:00 +0000https://stackharden.com/guides/ssh-hardening/A modern OpenSSH baseline — key-only authentication, ed25519, restricted users, sensible session limits, and the configuration changes that actually move risk.https://stackharden.com/guides/ollama-hardening/Mon, 01 Jun 2026 00:00:00 +0000https://stackharden.com/guides/ollama-hardening/A practitioner's baseline for running self-hosted Ollama on a hardened Linux host — bind safety, systemd unit hardening, reverse-proxy posture, GPU access scoping, model storage permissions, and update hygiene. Opens the `ai-infrastructure` series.https://stackharden.com/guides/ubuntu-baseline/Sat, 16 May 2026 00:00:00 +0000https://stackharden.com/guides/ubuntu-baseline/A pragmatic Ubuntu 24.04 LTS hardening baseline — first-boot user setup, SSH, firewall, automatic security updates, audit logging, and time-sync — applied in the right order.https://stackharden.com/guides/rhel-baseline/Sat, 16 May 2026 00:00:00 +0000https://stackharden.com/guides/rhel-baseline/A pragmatic RHEL 9 / AlmaLinux 9 hardening baseline — first-boot user setup, SSH, firewalld, automatic patching, SELinux verification, audit logging, and the order to apply them in.