How to Configure a Linux Server: A Step-by-Step Guide

Quick answer: To configure a Linux server (e.g. Ubuntu Server): (1) install the OS from USB, set hostname, user and partitions (LVM); (2) update with sudo apt update && sudo apt upgrade; (3) basic security — create a sudo user, use SSH key login and disable password/root login in /etc/ssh/sshd_config, enable the firewall with ufw allow OpenSSH; (4) set a static IP (netplan), timezone and NTP; (5) install the services you need (Nginx/Apache, MySQL/PostgreSQL, Docker…); (6) enable automatic security updates, backups and monitoring. Use an LTS release and open only the ports you need.

1. Install the OS

Download a server distro (Ubuntu Server LTS, Debian, Rocky/AlmaLinux), write it to USB with Rufus/balenaEtcher, boot and install. Set the hostname, create a user, and use LVM partitioning for flexibility.

2. Update the system

sudo apt update && sudo apt upgrade -y

(On RHEL-based: sudo dnf update.)

3. Secure access

• Create a dedicated sudo user and avoid using root directly.
• Set up SSH key authentication, then in /etc/ssh/sshd_config set PasswordAuthentication no and PermitRootLogin no; restart SSH.
• Enable the firewall: sudo ufw allow OpenSSH then sudo ufw enable.
• Consider Fail2ban to block brute-force attempts.

4. Network and time

Set a static IP with netplan (Ubuntu), the correct timezone (timedatectl) and NTP for accurate clocks.

5. Install services

Install what the server is for — web (Nginx/Apache), database (MySQL/PostgreSQL), containers (Docker), or app runtimes — and open only their required ports in ufw.

6. Maintenance

• Enable unattended-upgrades for security patches.
• Configure backups (and test restores).
• Add monitoring (Prometheus/Grafana or the provider’s tools) and centralised logs.
• Document the configuration and keep an inventory.

For production business servers, a managed IT provider can harden, monitor and maintain the system for you.