jkullick

ssh-keygen -t rsa -b 4096 -N '' -f ~/.ssh/id_rsa -C '$COMMENT'

jkullick

usermod -G sftp $USER
usermod -s /bin/false $USER
chown root:root /home/$USER
chmod 0755 /home/$USER
mkdir /home/$USER/uploads
chown $USER:$USER /home/$USER/uploads

/etc/ssh/sshd_config:

jkullick

ssh-keygen [-E md5] -lf ~/.ssh/id_rsa.pub

jkullick

ssh-keygen -y -f ~/.ssh/id_rsa > ~/.ssh/id_rsa.pub

jkullick

# Containers
docker rm -f $(docker ps -a -q)

# Images
docker rmi -f $(docker images -q)

jkullick

docker rmi -f $(docker images | grep "^<none>" | awk '{print $3}')

---

Source

jkullick

/etc/default/ufw:

...
DEFAULT_FORWARD_POLICY="ACCEPT"

service ufw restart
ufw allow in on docker0
ufw allow out on docker0

jkullick

openssl req -out $DOMAIN.csr -newkey rsa:4096 -nodes -sha256 -keyout $DOMAIN.key -subj "/CN=$DOMAIN"

jkullick

openssl x509 -req -days 3650 -in $DOMAIN.csr -signkey $DOMAIN.key -out $DOMAIN.crt

jkullick

openssl s_client -connect $SERVER:443