Ubuntu Server Hardening — Part 1: The Essentials

The three measures every public Ubuntu server needs within the first hour: a default-deny firewall with UFW, brute-force protection with Fail2ban, and automatic security updates.