3 guides tagged security.
A freshly provisioned Ubuntu VPS accepts root logins with a password, so automated scanners start guessing credentials within minutes of the host getting a public IP address, and the auth log
Keep the listener off the public internet, get pg_hba.conf right, require TLS for remote connections, and give the application a role that cannot drop your tables — on PostgreSQL 17 and Ubuntu 24.04.
SSH hardening, a default-deny firewall, and the fix for the problem that catches almost everyone — Docker publishing container ports straight past UFW into the public internet.