$ -weight: 600;">sudo dd if=debian-13-amd64-netinst.iso of=/dev/sdX bs=4M -weight: 500;">status=progress
-weight: 600;">sudo dd if=debian-13-amd64-netinst.iso of=/dev/sdX bs=4M -weight: 500;">status=progress
sha256sum debian-13-amd64-netinst.iso
sha256sum debian-13-amd64-netinst.iso
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">update && -weight: 600;">sudo -weight: 500;">apt -weight: 500;">upgrade -y
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">update && -weight: 600;">sudo -weight: 500;">apt -weight: 500;">upgrade -y
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install -y vim -weight: 500;">curl -weight: 500;">wget -weight: 500;">git htop tmux unzip zip ca-certificates
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install -y vim -weight: 500;">curl -weight: 500;">wget -weight: 500;">git htop tmux unzip zip ca-certificates
-weight: 600;">sudo -weight: 500;">systemctl -weight: 500;">start nginx
-weight: 600;">sudo -weight: 500;">systemctl -weight: 500;">enable nginx
-weight: 500;">systemctl -weight: 500;">status nginx
-weight: 600;">sudo -weight: 500;">systemctl -weight: 500;">start nginx
-weight: 600;">sudo -weight: 500;">systemctl -weight: 500;">enable nginx
-weight: 500;">systemctl -weight: 500;">status nginx
PermitRootLogin no
PasswordAuthentication no
MaxAuthTries 3
PermitRootLogin no
PasswordAuthentication no
MaxAuthTries 3
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install ufw
-weight: 600;">sudo ufw default deny incoming
-weight: 600;">sudo ufw default allow outgoing
-weight: 600;">sudo ufw allow ssh
-weight: 600;">sudo ufw allow 80/tcp
-weight: 600;">sudo ufw allow 443/tcp
-weight: 600;">sudo ufw -weight: 500;">enable
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install ufw
-weight: 600;">sudo ufw default deny incoming
-weight: 600;">sudo ufw default allow outgoing
-weight: 600;">sudo ufw allow ssh
-weight: 600;">sudo ufw allow 80/tcp
-weight: 600;">sudo ufw allow 443/tcp
-weight: 600;">sudo ufw -weight: 500;">enable
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install nginx
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install php8.3-fpm php8.3-cli
-weight: 600;">sudo -weight: 500;">systemctl -weight: 500;">enable nginx
-weight: 600;">sudo nginx -t && -weight: 600;">sudo -weight: 500;">systemctl reload nginx
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install nginx
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install php8.3-fpm php8.3-cli
-weight: 600;">sudo -weight: 500;">systemctl -weight: 500;">enable nginx
-weight: 600;">sudo nginx -t && -weight: 600;">sudo -weight: 500;">systemctl reload nginx
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install postgresql postgresql-contrib
-weight: 600;">sudo -u postgres createuser myapp
-weight: 600;">sudo -u postgres createdb myappdb -O myapp
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install postgresql postgresql-contrib
-weight: 600;">sudo -u postgres createuser myapp
-weight: 600;">sudo -u postgres createdb myappdb -O myapp
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install -weight: 500;">docker-ce -weight: 500;">docker-ce-cli containerd.io
-weight: 600;">sudo usermod -aG -weight: 500;">docker $USER
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install -weight: 500;">docker-ce -weight: 500;">docker-ce-cli containerd.io
-weight: 600;">sudo usermod -aG -weight: 500;">docker $USER
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install borgbackup
borg init --encryption=repokey /backup/borg-repo
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">install borgbackup
borg init --encryption=repokey /backup/borg-repo
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">update && -weight: 600;">sudo -weight: 500;">apt full--weight: 500;">upgrade -y
-weight: 600;">sudo sed -i 's/bookworm/trixie/g' /etc/-weight: 500;">apt/sources.list
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">update
-weight: 600;">sudo -weight: 500;">apt full--weight: 500;">upgrade -y
-weight: 600;">sudo reboot
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">update && -weight: 600;">sudo -weight: 500;">apt full--weight: 500;">upgrade -y
-weight: 600;">sudo sed -i 's/bookworm/trixie/g' /etc/-weight: 500;">apt/sources.list
-weight: 600;">sudo -weight: 500;">apt -weight: 500;">update
-weight: 600;">sudo -weight: 500;">apt full--weight: 500;">upgrade -y
-weight: 600;">sudo reboot - Linux Kernel 6.12+ for improved hardware support and better performance
- systemd 256 with modern -weight: 500;">service and boot management improvements
- GCC 14 for updated compiler features and optimizations
- 64-bit time_t support for full Year 2038 readiness - nftables as the default firewall framework
- AppArmor enabled by default for stronger application confinement
- OpenSSL 3.2+ with modern cryptographic improvements
- Improved installer firmware support for easier deployment on modern systems - Netinstall ISO — ideal for lean server deployments
- Full DVD ISO — useful for offline installation environments
- Cloud images — convenient for AWS, Azure, and other platforms
- Live images — great for testing before installing - Disable root SSH login
- Use SSH keys instead of passwords
- Enable a firewall with a default deny policy
- Install Fail2Ban to reduce brute-force attacks
- Keep packages updated regularly
- Use AppArmor profiles where applicable - 3 copies of your data
- 2 different storage media
- 1 offsite backup
