Setting Up Your First VPS: A Beginner's Tutorial

Setting up your first VPS can seem daunting, but with this step-by-step tutorial you will have a fully configured, secure server ready for hosting websites or applications within an hour.

Prerequisites

A VPS from a provider like PowerVPS
An SSH client (Terminal on Mac/Linux, PuTTY or Windows Terminal on Windows)
Basic command line knowledge

Step 1: Log In to Your VPS

After purchasing a VPS, you will receive an IP address and root credentials. Connect:

ssh root@YOUR_VPS_IP

Accept the host key fingerprint when prompted.

Step 2: System Update

apt update && apt upgrade -y

If the kernel was updated, reboot:

reboot

Step 3: Create a Non-Root User

adduser deploy
usermod -aG sudo deploy

Switch to the new user to verify:

su - deploy
sudo apt install htop    # test sudo access

Step 4: Set Up SSH Keys

On your local machine (not the VPS):

ssh-keygen -t ed25519 -f ~/.ssh/vps_key
ssh-copy-id -i ~/.ssh/vps_key deploy@YOUR_VPS_IP

Now log in without a password:

ssh -i ~/.ssh/vps_key deploy@YOUR_VPS_IP

Step 5: Harden SSH

Edit /etc/ssh/sshd_config on the VPS:

Port 2222
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
MaxAuthTries 3

Restart SSH:

sudo systemctl restart sshd

Important: Keep your current session open and test the new config in a second terminal before closing.

Step 6: Install a Firewall

sudo apt install ufw
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow 2222/tcp    # new SSH port
sudo ufw allow 80/tcp
sudo ufw allow 443/tcp
sudo ufw enable

Step 7: Install Fail2Ban

sudo apt install fail2ban
sudo systemctl enable --now fail2ban

This automatically blocks IPs that repeatedly fail login attempts.

Step 8: Install a Web Server

Nginx

sudo apt install nginx
sudo systemctl enable --now nginx

Visit http://YOUR_VPS_IP in a browser — you should see the Nginx welcome page.

Configure a Basic Site

Create /etc/nginx/sites-available/mysite:

server {
    listen 80;
    server_name example.com www.example.com;
    root /var/www/mysite;
    index index.html;
}

Enable it:

sudo ln -s /etc/nginx/sites-available/mysite /etc/nginx/sites-enabled/
sudo nginx -t
sudo systemctl reload nginx

Step 9: Install SSL with Let's Encrypt

sudo apt install certbot python3-certbot-nginx
sudo certbot --nginx -d example.com -d www.example.com

Certbot automatically configures HTTPS and sets up auto-renewal.

Step 10: Set Up Automatic Updates

sudo apt install unattended-upgrades
sudo dpkg-reconfigure unattended-upgrades

Choose "Yes" to enable automatic security updates.

What's Next?

Your VPS is now secured and ready. Common next steps include:

Installing a database (MySQL, PostgreSQL)
Setting up Docker
Deploying your application
Configuring monitoring tools