Ssh on Servicios Rogeliowar

Connect your mobile to SSH from anywhere with WireGuard and Termius

Tue, 19 May 2026 00:00:00 +0000

The Problem
#

I needed to access my home server via SSH from my mobile phone without exposing it directly to the internet. The obvious options were bad: opening port 22 to the world is suicidal, and trusting third-party apps with root access didn’t convince me. The solution that worked: WireGuard + Termius.

Why This Combination
#

WireGuard is lightweight, fast, and consumes little battery on mobile devices. Termius is a polished SSH client that handles private keys well. Together, you have secure access without complications.

Hardening Linux servers: practical guide

Fri, 01 May 2026 00:00:00 +0000

Server Security Hardening: Essential Steps
#

Having a server exposed to the Internet without minimal security configuration is leaving the door wide open. In this article, I’ve compiled the steps I apply on my own servers to reduce the attack surface without complicating day-to-day management.

SSH: the first line of defense
#

The SSH service is the most attacked entry point on any Linux server. These are the most important settings in /etc/ssh/sshd_config:

Fail2ban to protect SSH and Nginx: practical configuration on Ubuntu

Thu, 30 Apr 2026 00:00:00 +0000

The Problem: Brute Force Attacks
#

After exposing my Ubuntu server to the internet, I spent a night reviewing logs. SSH received failed login attempts every second. Nginx also had suspicious requests to common routes. I needed something to block these attempts automatically. Fail2ban was my solution.

Installation
#

sudo apt update
sudo apt install fail2ban
sudo systemctl start fail2ban
sudo systemctl enable fail2ban

Verify that it’s running:

SSH authentication by public key: disable passwords on Ubuntu Server

Thu, 30 Apr 2026 00:00:00 +0000

Why Switch to Key-Based Authentication
#

After months of maintaining a home server with open SSH access, I got tired of brute force password attacks. Switching to public key authentication was the best security decision I made. Keys are mathematically impossible to crack through brute force, while passwords are always a target.

SSH Key Generation
#

First, generate a key pair on your local machine (not on the server):

Ssh on Servicios Rogeliowar

Connect your mobile to SSH from anywhere with WireGuard and Termius

The Problem #

Why This Combination #

Hardening Linux servers: practical guide

Server Security Hardening: Essential Steps #

SSH: the first line of defense #