REPOS (for Ubuntu 14. Adjust for the version you are using) * if needed * nano /etc/apt/sources.list * # kenya specific (add at the top) * deb http://ubuntu.mirror.ac.ke/ubuntu/ <http://ubuntu.mirror.ac.ke/ubuntu/> trusty main * deb-src http://ubuntu.mirror.ac.ke/ubuntu/ <http://ubuntu.mirror.ac.ke/ubuntu/> trusty main * deb http://ubuntu-archive.mirror.liquidtelecom.com/ubuntu/ <http://ubuntu-archive.mirror.liquidtelecom.com/ubuntu/> trusty main * deb-src http://ubuntu-archive.mirror.liquidtelecom.com/ubuntu/ <http://ubuntu-archive.mirror.liquidtelecom.com/ubuntu/> trusty main * # generic (add at the top) * deb mirror://mirrors.ubuntu.com/mirrors.txt trusty main restricted universe multiverse deb mirror://mirrors.ubuntu.com/mirrors.txt trusty-updates main restricted universe multiverse deb mirror://mirrors.ubuntu.com/mirrors.txt trusty-backports main restricted universe multiverse deb mirror://mirrors.ubuntu.com/mirrors.txt trusty-security main restricted universe multiverse * locate http://us.archive.ubuntu.com/ubuntu and replace it with http://archive.ubuntu.com/ubuntu update the server * setup automatic updates * dpkg-reconfigure -plow unattended-upgrades * apt-get update * repo keys * add-apt-repository ppa:nilarimogard/webupd8 * apt-get update * apt-get install launchpad-getkeys * apt-get upgrade * apt-get dist-upgrade clamav antivirus * apt-get install clamav clamav-daemon * freshclam * /etc/init.d/clamav-daemon start clamav antivirus scan and update * crontab –e * 47 * * * * freshclam * 00 00 * * * clamscan -r --bell -i / From: Peter Karunyu via skunkworks [mailto:skunkworks@lists.my.co.ke] Sent: Wednesday, March 9, 2016 4:01 PM To: Skunkworks forum <skunkworks@lists.my.co.ke> Subject: [Skunkworks] Peer review: Linux server setup checklist Dear members, Every so often I get asked to setup a Linux server on some cloud provider, usually a LAMP stack, so normally I create one server to run Apache and PHP, and another server to run MySQL only. I am NOT a sys admin. So I picked up the TODO list below from the interwebs. Could someone please tell me if the items below are okay, or if there is anything new i should be doing, or not doing; for a simple, medium security, medium performance web or database server. Thanks in advance! https://gist.github.com/pkarunyu/da5e7d5d4062c70b6668