🏗️ Building my home server: Part 1

💾 Server OS

🌎 Connect to the Wi-Fi

💡 Setup SSH

🧑🏻‍💻 Connect through SSH

🛡️ Hardening security Starting and connecting to the server I recently decided to build my own server for sharing files across my local network. Initially, my goal was simply to create a central hub for my movies, photos, and files. However, as the project evolved, I found myself expanding beyond that original scope. I aimed to create a straightforward, well-organized system, all while prioritizing security best practices. Throughout the process, I gained valuable experience with various tools and systems, including Linux, SSH, SMB, volumes, user management, firewalls, Nginx, backup strategies, and Ansible automation. This series of posts is about my journey of building the server, the discoveries I made along the way, and how I adapted after learning from my mistakes. My intention was also to learn about Linux. I worked with it before a lot especially in containerized environments, however, I was thinking that this would be a perfect opportunity to refresh my knowledge and to get hands-on experience. So, I decided to do it hardcore: I decided to work with Ubuntu Server, which is basically a headless Linux. Having only the CLI to interact with the system forced me to interact with the system entirely through Linux commands, which made me realize how much I had forgotten about basic Linux commands. All in all, it turned out to be a great decision, as I ended up learning a lot. My first challenge was figuring out how to connect my server to the Wi-Fi network, enabling me to manage it via SSH. I used this guide to configure the Wi-Fi connection. First, I needed to identify my system’s network interface. I ran one of the following commands: ls /sys/class/net or ip a. According to the guide linked above, the Wi-Fi interface typically starts with a w. In my case, it was wlo1. After that, I edited the Netplan configuration file with the following command: sudo vi /etc/netplan/50-cloud-init.yaml. Then, I modified the configuration as follows: Finally, I applied my new Netplan configuration by running sudo netplan apply. To verify that my server was successfully connected to the network, I ran: ip a. To set up an SSH tunnel and access my server from my laptop, the first step was to launch an OpenSSH server. I followed this guide to achieve that. At this point, I could have connected to the server using my username and password with the following command: ssh username@server-ip. However, for better security, it’s recommended to use an RSA key instead. So, I generated an RSA key pair by running the following command: ssh-keygen -t rsa -b 4096 -C "some comment, e.g. email" -f ~/.ssh/id_rsa_home_server. After this I copied the public key to the server:ssh-copy-id -i ~/.ssh/id_rsa_home_server.pub username@server_ip To enhance SSH security, I needed to modify the SSH configuration file located at /etc/ssh/sshd_config. While the file already contains the default settings, I made the following adjustments to improve security: I also configured UFW to allow SSH traffic. UFW stands for Uncomplicated Firewall, which is a frontend for managing iptables (the Linux firewall). To apply changes I ran the following commands: Finally, I was able to connect to my server from my laptop by running the command below! 🎉 You can also read this post on my portfolio page. Templates let you quickly answer FAQs or store snippets for re-use. Hide child comments as well For further actions, you may consider blocking this person and/or reporting abuse