Admin: New guide article

2026-04-12T16:02:59Z

New guide article

New page

'''Setting up your first VPS''' can seem daunting, but with this step-by-step tutorial you will have a fully configured, secure server ready for hosting websites or applications within an hour.

== Prerequisites ==

* A VPS from a provider like [https://powervps.net/?from=32 PowerVPS]
* An SSH client (Terminal on Mac/Linux, PuTTY or Windows Terminal on Windows)
* Basic command line knowledge

== Step 1: Log In to Your VPS ==

After purchasing a VPS, you will receive an IP address and root credentials. Connect:

ssh root@YOUR_VPS_IP

Accept the host key fingerprint when prompted.

== Step 2: System Update ==

apt update && apt upgrade -y

If the kernel was updated, reboot:

reboot

== Step 3: Create a Non-Root User ==

adduser deploy
usermod -aG sudo deploy

Switch to the new user to verify:

su - deploy
sudo apt install htop # test sudo access

== Step 4: Set Up SSH Keys ==

On your '''local machine''' (not the VPS):

ssh-keygen -t ed25519 -f ~/.ssh/vps_key
ssh-copy-id -i ~/.ssh/vps_key deploy@YOUR_VPS_IP

Now log in without a password:

ssh -i ~/.ssh/vps_key deploy@YOUR_VPS_IP

== Step 5: Harden SSH ==

Edit <code>/etc/ssh/sshd_config</code> on the VPS:

Port 2222
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
MaxAuthTries 3

Restart SSH:

sudo systemctl restart sshd

'''Important:''' Keep your current session open and test the new config in a second terminal before closing.

== Step 6: Install a Firewall ==

sudo apt install ufw
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow 2222/tcp # new SSH port
sudo ufw allow 80/tcp
sudo ufw allow 443/tcp
sudo ufw enable

== Step 7: Install Fail2Ban ==

sudo apt install fail2ban
sudo systemctl enable --now fail2ban

This automatically blocks IPs that repeatedly fail login attempts.

== Step 8: Install a Web Server ==

=== Nginx ===

sudo apt install nginx
sudo systemctl enable --now nginx

Visit <code>http://YOUR_VPS_IP</code> in a browser — you should see the Nginx welcome page.

=== Configure a Basic Site ===

Create <code>/etc/nginx/sites-available/mysite</code>:

server {
listen 80;
server_name example.com www.example.com;
root /var/www/mysite;
index index.html;
}

Enable it:

sudo ln -s /etc/nginx/sites-available/mysite /etc/nginx/sites-enabled/
sudo nginx -t
sudo systemctl reload nginx

== Step 9: Install SSL with Let's Encrypt ==

sudo apt install certbot python3-certbot-nginx
sudo certbot --nginx -d example.com -d www.example.com

Certbot automatically configures HTTPS and sets up auto-renewal.

== Step 10: Set Up Automatic Updates ==

sudo apt install unattended-upgrades
sudo dpkg-reconfigure unattended-upgrades

Choose "Yes" to enable automatic security updates.

== What's Next? ==

Your VPS is now secured and ready. Common next steps include:

* Installing a database (MySQL, PostgreSQL)
* Setting up [[Docker and Kubernetes: Getting Started|Docker]]
* Deploying your application
* Configuring monitoring tools

== See Also ==

* [[Understanding VPS Hosting: A Comprehensive Guide]]
* [[Server Security Best Practices]]
* [[How to Choose the Best VPS Provider]]
* [[Basic Server Administration Skills for Beginners]]

[[Category:VPS Hosting]]

Setting Up Your First VPS: A Beginner's Tutorial - Revision history

Admin: New guide article