Secure and lock your own hosted ubuntu server (InvoiceNinja)

Networking & Firewalls
1

Hi

I have set up my own hosted invoiceNinja server On Ubuntu 18.04 I am completely new to this by coughing myself and wondering what security thought I need if it is something I forgot

I use xcp-ng is I have a VM for invoiceNinja it is on its own vlan but that should be locked between others Followed this late so i set up my invoiceNinja server using this manual and then i put on Let’s Encrypt and ufw in the manual for Let’s Encrypt it says that you should use ufw with words and not port numbers which is best. then I closed the 80 port in my USG

2

Make sure the server is automatically loading updates and that Let’s Encrypt is auto updating. Also you should probably take out any weak ciphers to help protect against a TLS downgrade attack.