defense
- specification
- ufw / fail2ban / unattended updates
- status
- deployed
- access
- internal
details
the firewall denies all inbound connections except web traffic and key-based remote administration. password logins are disabled and root login over ssh is not permitted.
addresses with repeated failed ssh logins are banned automatically for one hour. debian packages receive security updates automatically; other components are updated manually.