Skip to content
OrbixPanel OrbixPanel Tutorials

Server hardening checklist for self-hosters

Security isn’t one setting — it’s a handful of habits that each close a door. Work down this list; most items take minutes and OrbixPanel does the heavy lifting.

The checklist

  • Turn on two-factor auth for your panel login. → Account security & 2FA
  • Serve every site over HTTPS. Request free SSL for each domain and let it auto-renew. → What is SSL
  • Close unused ports. Open only 22/80/443 (plus mail/DNS if you run them). → Firewall & ports
  • Lock down SSH. Use SSH keys instead of passwords, and restrict port 22 to your own IP where you can.
  • Keep software updated. Watch security advisories and apply updates promptly — outdated apps are the #1 way in.
  • Use strong, unique passwords everywhere, stored in a password manager. Rotate any that may have leaked.
  • Automate offsite backups and test a restore. A backup you’ve never restored is a guess. → 3-2-1 backup strategy
  • Scan for malware on a schedule. → Scan for malware
  • Least privilege. Give each person/app only the access it needs; don’t share the main admin account.
  • Keep databases off the internet. Apps reach them on localhost; never expose 3306/5432/6379 publicly.

Why this order

The top items block the most common, lowest-effort attacks: credential stuffing (2FA), traffic snooping (SSL), exposed services (firewall), and known vulnerabilities (updates). Backups are your safety net when something gets through anyway.

Treat this as a recurring review, not a one-time task. Re-check it after any big change — a new app, a new user, a new open port.

Running OrbixPanel? 2FA, SSL, firewall, advisories, and backups are all built in. OrbixPanel.com → — the free, self-hosted, AI-powered hosting control panel.