/biz/ - Business & Finance

>>29091329
>Basic
Prevent SSH login from any IP that isn't your desktop and do whatever you can to prevent having any ports open
Also, use ssh keys and disable root login for SSH
>Less basic
Disable any non-essential service
Use a separate user for running the node
>Not basic at all
Use IP tables and blacklist any IP that isn't your's
Encrypt partitions
Use 64+ digit passwords (you can store them in a file if you encrypt the file and remove the plaintext file by writing random 8 bit integers to every byte of the file and deleting it)
>Complete autist tier
Ditch ubuntu, build LFS install
Check source for everything you're building and refuse to use anything with networking
Build your hardened kernel with a custom .config speciallized for security
>"I'm already on a watchlist anyways"
Only plug in your server network cable to access your wallet
Own a shotgun, an intermidiate calibre rifle and 1000 rounds for each
Force everything on your network through TOR
Use that same LFS install as your daily driver

Feel free to go as far as you want, security is a balance of risk and convenience, you give up enough convenience to feel safe

>>13497489
>There's no reason to look up to me
be a ditch digger at the grave yard!