After installing your Linux OS on your unmanaged virtual private server, say, with Linode, Slicehost or others, you may be wondering, “How do I access it, securely & easily?!”
If you’re using Windows locally, here’s how, in under 5 minutes.
Not only that. Using PuTTY and OpenSSH, we’ll configure an encrypted connection that you can access using authentication keys, securely simplifying login to a double-click, password-free process.
Setup Unmanaged VPS: The Ubuntu-Nginx Guide
Take your virtual private server from zero to hero
.. from blank box to cute-as server ..
with this easy-to-follow copy/paste guide.
22+ parts with video, here’s the index.
The Complete VPS Security Process
So that you know where we’re going with this important foundation work, here’s the order of play:-
- In this tutorial, we’ll set up the command line interface (CLI). In the next guide Create a Linux User & Set Permissions we’ll setup a Linux user with permissions
- In Encrypt Data with OpenSSH & Auto-Login with PuTTY we can create encrypted, point-and-click access
- We’ll complete this modular process in Harden the Secure Shell (SSH) & Create a Firewall, adding a rock solid layer of security using SSH and iptables (the firewall).
If you’re using a local Linux Ubuntu machine, you shouldn’t be here at all, interloper! Go to Setup openSSH for Linux-to-Linux instead and carry on from there.
Video: Setup a Simple PuTTY Configuration
Watch the, er, guvideo for a better idea of how to do this.
Install PuTTY, the CLI Software (it’s free!)
What is it, some kind of window sealant? Hmmn, not so far from the truth! PuTTY is an OpenSSH client or, put simply, a way of communicating securely, creating an impenetrable tunnel from your local Windows PC to your remote Linux server. It encrypts whatever you do, so passwords and the like are safe. It can also be used to speed up your local to remote logon procedure, as we’ll see later on in the series.
Goto PuTTY’s website, have a read, and then head to the download page.
There are a few PuTTY modules, but the ones we’ll be using for this setup are:-
- PuTTY for the command line interface/terminal/shell/console/whatever else it’s called
- Pageant the secure (SSH) authentication tool that uses a keyset to unlock a connection
- PuTTYgen the ‘authentication keys’ generator
Hold on! What’s SSH? Aah, yes. It stands for Secure Shell. It’s a secure, encrypting network protocol, so that when you administer your VPS from your local computer, no third party can see what you’re doing. We want to use it for two things in this series:-
- to provide a secure connection via the command line interface
- to shore up an otherwise unencrypted FTP connection, making it SSH FTP, or Secure FTP or SFTP for short. We’ll set that up in FileZilla for Secure FTP (SFTP)
To keep everything simple, download the Windows installer which includes all required modules. As of writing, here it is.
Now, install PuTTY.
Locate Your New VPS IP Address
For example, with a Linode, but similar for Slicehost and other unmanaged VPS hosts, you’d …
- go to your member login page
- login
- click on your new Linode to enter the Dashboard
- click on Network and…
- in there, there’ll be a number sequenced like 93.113.135.123, and labelled, yup, IP Address. Copy that number.
How to Configure PuTTY
From your Windows desktop, goto Start > All Programs > PuTTY > PuTTY, and click it open.
Where the newly opened box asks for Host Name (or IP Address), paste your IP number.
Next to it, the Port will probably say 22, which is what we want for now. Just ensure it does.
The Connection type should be set to SSH.
Click Open.
Up pops a PuTTY Security Alert. That’s standard. Click Yes.
Now at the CLI (the terminal) for the first time, as prompted, login as root and enter the password you entered when you set up your Linux distribution.
You’re in!
For the record, when you want to logout, it’s bad practise to click the close (X) button at the top right of the CLI. Enter “logout” or “exit” instead.
Jolly good, hats away!
Queued Up
As I touched on above, now we’ve got our PuTTY CLI set up, we’ll add ourselves as a Linux user, then secure the local-to-remote connection with easy shortcut access.
Then, for those of you wanting the complete Linux server solution, we’ll add some security measures before crack on with installing the big guns like PHP5, MySQL and that damn tasty Nginx web server, which knocks Apache into a cocked hat.
After a brief period of dribbling over our hot-to-trot multi-site/blog solution, we’ll consider email, secure ftp, this, that, other. Er, think I need a cold shower. You’d best just read the index…
Setup Unmanaged VPS: The Ubuntu-Nginx Guide
Take your virtual private server from zero to hero
with this easy-to-follow copy/paste guide.
“My local PC runs Windows” Show me for Linux/Mac
“My local machine is Linux/Mac” Show me for Windows
22+ parts with video, here’s the index ..
-
Setup Unmanaged VPS: The Ubuntu-Nginx Guide
Introducing vpsBible’s how-to guide for setting up a super-charged unmanaged VPS featuring Ubuntu and Nginx.
-
VPS (Virtual Private Server) vs Shared vs Dedicated
Before getting stuck in, let’s compare the web host types in detail and weigh up the differences between managed & unmanaged VPS.
-
Set Up a VPS Linux Distribution
Opening a VPS hosting account, we’ll choose, configure & launch a Linux server ‘distribution’.
-
Set Up Command Line Interface (CLI) using PuTTY
Now we’ve got a server to play with, we’ll connect to it, using the ’ssh’ protocol for a super-secure link.
-
Create a Linux User & Set Permissions
Initially you’ve logged into your remote Linux machine as ‘root’. We’ll add you as a user now, with root or SuperUser permissions.
-
Encrypt Data with OpenSSH & Auto-Login with PuTTY
Now we can use ‘authentication keys’ to shore up our connection while simplifying login to an automated, password-free yet secure process.
-
Harden the Secure Shell (SSH) & Create a Firewall
The final security step: galvanizing the OpenSSH protocol and setting up an ‘iptables’ firewall. Now the server is rock ruddy solid.
-
Edit bashrc for User-Friendly Linux, plus System Updates
We use the terminal a whole lot so let’s cut ourselves a break and create some command shortcuts, then update the server.
-
Add a Domain Zone to Your VPS
To make your server aware of yourDomain.com you’ll need a few ‘DNS’ records. Damn this is simple I’m practically asleep!
-
Prepare Linux Server for Email with Postfix
In order to send and receive email from our web applications we’ll install some software and tweak the ‘RDNS’ record.
-
Install PHP5 & MySQL – The One-Stop FastCGI Index Page
Add PHP5 & MySQL, but which FastCGI method is best? Here’s the benchmarking, 4 ways to install/compile, add caching modules & more.
-
Nginx (better than Apache) Web Server
Let’s install this supersonic web server, tweaking its file structure & adding default configuration files.
-
Setup FileZilla for Secure FTP (SFTP)
There’s FTP, and then there’s ‘Secure FTP’. We’ll set up FileZilla using SFTP – and those authentication keys – for secure file transfers.
-
Serve Multiple Sites & Blogs with Virtual Hosts
We want a website folder structure, some permissions, some site-specific configuration files and, hey, we’ll hook up ‘FastCGI’.
-
Adding Sub-Domains with Nginx
Need a sub-domain? If you do, here’s how to add subDomain.yourSite.com with an ‘A record’ and a configuration file.
-
Integrate A CMS Like WordPress, WP MU, Drupal etc
For those of you wanting to use a specific content framework, such as a CMS, blogging or forum software, pop in here and we’ll sort that out.
-
Google Apps for Domain-Specific Email
GA’s free Standard Edition for catchall webmail – POP-ping or IMAP-ped to your desktop client – saves precious server resources for your webs.
-
Moving Day! How to Move Your Blog or Site
Nearly there. Here’s the web site or blog migration guide, relocating to your VPS with minimal or no downtime.
Manage Unmanaged VPS: Ubuntu-Nginx Administration
Already set it up? We’d best maintain it then.
Toggle to the .. Ubuntu-Nginx Admin Index
Manage Unmanaged VPS: Ubuntu-Nginx Administration
Maintain your virtual private server with ..
.. cheatsheets, tutorials, tips & guides.
Head back to the .. Ubuntu-Nginx Installation Index
-
Nginx Control Panel: Here’s the Deal
You’re migrating shared-to-VPS and want a GUI like cPanel? No you don’t, not after you read this! What’s more, you don’t need one either.
-
Nginx Control Panel Workarounds
For every control panel module there’s an equivalent (and faster) terminal command. Let’s compare these.
-
Upgrade to Nginx Latest Version with ZERO Downtime
Keep Nginx up-to-date – and optimized for security. This guide shows precisely how *with no missed server requests*.
-
Compile an Advanced Nginx Module Configuration
Need special web server functions? Here’s how to install or upgrade Nginx with bespoke required modules & parameters.
-
Add Web Sites Nginx Cheatsheet
Once you’ve set up your first site, adding more gets easier. Especially when you refer to this. (Let’s face it, I’m just too good to you.)
-
Adding Sub-Domains with Nginx
Rather than add somesite.tld, maybe you want some.subsite.tld? Here’s how to set your A record using a DNS manager and the vhost file for Nginx.
-
Add/Delete MySQL Database from Command Line
Need a database? Want to bin an old db? This tutorial shows you how using the terminal command line console whatnot.
-
Configure phpMyAdmin for Nginx to Maintain MySQL
Rather than have to crunch databases via the command line, we can make life easier by adding this splendid tool to manage them.
-
Backup/Export MySQL DB with CLI & mysqldump
Here’s how to backup a database from the command line using the handy mysqldump utility.
-
Import MySQL Database using Command Line
Import data to a new database with this simple mysqldump guide .. great for reinstating an old backed-up db, for instance.
-
Batch Replace/Delete Data in MySQL Database
Change repetitive db data with a single command. Rather than manually find & alter each instance, isolate the lot & update multiple content.
-
LOST a MySQL Password? How to RESET it
Lost your MySQL password? That’s a bit of a bummer .. or it would be if you didn’t have this new password setup guide, huh.
-
Backup or Upload with Secure Copy SCP (Linux to Linux)
Never mind FTP m8! Save time and download/upload your files using encrypted SCP (secure copy), the #1 Linux-Linux file transfer solution.
-
Backup or Upload with PuTTY PSFTP (Windows/Linux)
Equivalent to the above, how to transfer your files if you’re unlucky enough to be running Windows for your local PC. Not that I’m biased.
-
*USEFULLY* Park A Spare Domain with Nginx
Got a spare domain name sat around doing nothing? Put it to some use, have it point its traffic at your primary domain. Here’s the deal ..
-
Password Protect Nginx Web Files/Directories
Maybe you want a hidden website directory, say, for projects, or are developing a site and want it off-limits ’till launch day. Top tip ..
-
Redirect Web Pages with Nginx Rewrite Rule
Here’s the syntax to point a site or blog to another domain. That way, for instance, traffic from a passive site benefits an active one.
-
Nginx Error & Access Logs
Need to troubleshoot some error, or want to find out who’s trying to hack your site? Here’s a start .. those tell-tale logs.
-
Subversion for Easy CMS Updates ie WordPress/Drupal/etc
A brief introduction to install and know about the power of Subversion, the version control system to keep scripts and platforms up-to-date.
-
You Tell Me …
Something missing? Probably. Let me know what you’d like included. And if it’s listed below, shout out anyhow and I’ll try to bump it.
Nginx Admin: In the Works ..
This lot’s marked for addition already:-
- Setup or Edit DNS using Bind
- Network Tools Troubleshooting Guide
- The Comprehensive Permissions Guide
- Configuring Nginx Rewrites
- Custom Website Error Page
- Setting up Cron Jobs
- Rsync for Incremental Remote-to-Local Backup
- Cron & Rsync for Automatic Backup
- Cron & mysqldump for Auto DB Backup
- Safeguard Bandwidth with Hotlink Protection
- Block Access with Nginx’ IP Deny
Got a Question? Want to Comment?
This site has no comments system. We've got a better system!
Please use the link at the top of the post and goto this topic's forum thread:-
- to help build community
- for a superior knowledge base
- to keep info in one place, not diluted between forum & comments.
For those posts ported from Guvnr.com (pre-Feb/2010), archive comments remain.
Handy info from these comments is in the process of being ported to the forum and attributed to the original author.
If you think this idea sucks, let me know.
Thank you.
Leon September 8th, 2009 at 11:59 am
REALLY GREAT GUIDE, GUV! Will have to do some more reading me thinks….
the_guv September 16th, 2009 at 8:34 pm
@Leon .. big cheers .. you know it’s worth it.
Install/Upgrade WORDPRESS with SUBVERSION - VPS Bible #15 - GUVNR September 22nd, 2009 at 2:01 pm
[...] Set Up the Command Line Interface (CLI) using PuTTY * [...]
ADD a Linux USER with Visudo & Set Sudo Permissions: VPS BIBLE - vpsBible February 8th, 2010 at 3:18 pm
[...] up the terminal, logging into your VPS as we learned to do in Set Up Command Line Interface (CLI) using PuTTY or, if you’re running Linux locally, as we did in Setup openSSH for [...]
LOCK LINUX! – Configure SSH & an iptables Firewall: VPS BIBLE - vpsBible May 31st, 2010 at 9:18 am
[...] profile. All being well, you’ll get another one of those security alerts, that we saw in Set Up the Command Line Interface (CLI) using PuTTY. Click Yes. You’re in. Great, you can log in and out, at [...]