VPS 安装CentOS7后的安全加固及其它配置

1、使用密钥登录SSH
https://www.freehao123.com/vps-ssh/

2、禁用账号密码登录SSH
vi /etc/ssh/sshd_config
PasswordAuthentication no

3、安装APF
http://blog.topspeedsnail.com/archives/7660
apf -s 启动报错,命令找不到,安装相应的命令即可。
yum install which

4、安装ddos deflate
https://www.jianshu.com/p/f1e44408c195

5、安装denyhost
https://www.cnblogs.com/xxx91hx/p/4374327.html

6、用 VPS 搭建 shadowsocks 服务器
http://blog.chinaunix.net/uid-25530360-id-5595974.html

7、shadowsocks开机启动

cd /lib/systemd/system/

vi /lib/systemd/system/shadowsocks.service

[Unit]
Description=ShadowSocks

[Service]
TimeoutStartSec=0
ExecStart=/usr/bin/ssserver -c /etc/shadowsocks.json start
ExecStop=/usr/bin/ssserver -c /etc/shadowsocks.json stop

[Install]
WantedBy=multi-user.target

systemctl enable shadowsocks.service

systemctl start shadowsocks.service

8、CentOS7一键搭建frp服务器脚本
https://diannaobos.com/post/691.html
安装路径:/usr/local/frps
配置文件:/usr/local/frps/frps.ini

9、frps 添加开机启动
chkconfig frps on

10、安装Nginx
https://www.cnblogs.com/songxingzhu/p/8568432.html
Nginx路径:/etc/nginx
配置文件: /etc/nginx/nginx.conf

VPSCentOS7Nginx

我来吐槽

*

*