Server Management (DigitalOcean)
When to use this skill
-
Provisioning a new DigitalOcean Droplet.
-
Configuring Nginx or UFW.
-
Troubleshooting Linux server issues.
- Initial Setup
-
User: Create a non-root user with sudo privileges immediately.
-
SSH: Disable password login (PermitRootLogin no , PasswordAuthentication no ). Use SSH keys.
- Security
-
Firewall (UFW): ufw allow OpenSSH ufw allow 'Nginx Full' ufw enable
-
Fail2Ban: Install to prevent brute force attacks.
- Nginx Config
-
Reverse Proxy: Standard pattern for Node/Python apps: location / { proxy_pass http://localhost:3000; proxy_set_header Host $host; }
-
SSL: Use Certbot (python3-certbot-nginx ) for auto-renewing Let's Encrypt certificates.