My baseline recipe for hardening a fresh VPS

Every time I spin up a new VPS, I usually start with the same thought: “I just need this server for one app. I’ll secure it properly later.” And that is exactly where problems begin. A fresh VPS is