Foundation
Server Hardening & Optimization
Inherited servers with default configs, no fail2ban, open MySQL ports, and Apache serving phpMyAdmin to the internet. One server ran 839 days with zero backup cron and 134GB of unmanaged recordings.
Battle-tested hardening playbook: SSH lockdown, fail2ban with custom jails, MariaDB tuning, Apache security headers, automated backups to Hetzner storage boxes, recording cleanup with retention policies, and 240-day disk management.
fail2ban
MariaDB
Apache
iptables
Backup