Turkey (Turkish)
Germany (German)
Worldwide (English)
Ubuntu 26.04 LTS was released in April 2026.
Halkali merkez neighborhood fatih st ozgur apt no 46 , Kucukcekmece , Istanbul , 34303 , TR
A good VPS setup starts with access safety, not package installation. This guide orders users, SSH, firewall and update policy so you harden Ubuntu 26.04 without locking yourself out.
Keep the current SSH session open while changing SSH settings. Verify a second login and keep provider console access available until the new configuration is proven.
Create and test a second sudo user with SSH keys before restricting root/password login. Never enable UFW before allowing your SSH port.
Create and test a second sudo user with SSH keys before restricting root/password login. Never enable UFW before allowing your SSH port.
Prepare an Ubuntu 26.04 LTS VPS for production: non-root administration, SSH keys, UFW, updates, swap, time sync, logs and recovery checks.
Ubuntu 26.04 LTS was released in April 2026.
Standard security updates and critical fixes are planned through April 2031.
Keep one session open while validating the new key and port in a second session.
Allow SSH first, then enable the firewall; reversing the order can lock you out.
Capture kernel, disk, memory, IP and time state before changing anything.
cat /etc/os-releaseuname -rip -br addresslsblk -o NAME,SIZE,FSTYPE,MOUNTPOINTSfree -htimedatectl statusDaily root usage increases blast radius. A separate sudo user improves traceability and access policy.
adduser ekaadminusermod -aG sudo ekaadminid ekaadminsudo -l -U ekaadminKey installation, permissions and sshd syntax validation belong to the same change.
install -d -m 700 -o ekaadmin -g ekaadmin /home/ekaadmin/.sshnano /home/ekaadmin/.ssh/authorized_keyschown ekaadmin:ekaadmin /home/ekaadmin/.ssh/authorized_keys && chmod 600 /home/ekaadmin/.ssh/authorized_keyssshd -tsystemctl reload sshA firewall does not start services; it only controls reachability. Match open ports to actual service requirements.
sudo ufw default deny incomingsudo ufw default allow outgoingsudo ufw allow OpenSSHsudo ufw allow 80/tcpsudo ufw allow 443/tcpsudo ufw enablesudo ufw status numberedSecurity updates can be automated, but kernel and critical-service restarts still need maintenance windows and observation.
sudo apt updatesudo apt full-upgrade -yapt list --upgradablesystemctl --failedtest -f /var/run/reboot-required && cat /var/run/reboot-required || trueSwap is not a performance upgrade; it is a buffer against transient memory pressure. Monitor swapping on databases and latency-sensitive workloads.
swapon --showfree -hcat /proc/sys/vm/swappinessjournalctl -k | grep -i -E "oom|out of memory" | tail -30A service that works locally is not necessarily reachable correctly from the internet. Perform final checks from another network.
ss -lntupsystemctl --failedcurl -4 https://ifconfig.melast -a | headsudo journalctl -p warning --since today --no-pager | tail -80CPU and RAM are only part of the design; backups, console access, storage and network policy matter too. Size an Eka Sunucu VPS for the workload and validate it with this checklist.
Primary documentation and technical references used by this guide.
Continue with related infrastructure and implementation guides.
Ubuntu 26.04 VPS
Standard LTS security maintenance is planned through April 2031, with longer coverage available through Ubuntu Pro.
No. A custom port can reduce scan noise but is not a core control. Key authentication, root restrictions and firewall policy matter more.
It depends. Swap can absorb short memory spikes on small servers; sustained swapping usually indicates insufficient RAM.
Use the provider console, inspect `ufw status numbered`, and allow the correct SSH port. This is why console access should be verified first.