Defining Unmanaged Server
This repository focuses on "Unmanaged Server" security. Unmanaged Server can mean various things and can be imprecise as it is a colloquial term and it's used as jargon in many tech sectors. Here in this repository, an unmanaged server has a set meaning, though: A server that is delivered unmodified or with a default setup, thus leaving security with the end user rather than someone else: i.e. the ISP you rent from if you rent hardware. Think of this as essentially getting a server with just an OS installed on it. If you want a minecraft server, webserver, API, storage server, etc then you'd set it up on a server that comes unmanaged.
PS: If you built your own server/assembled the hardware, then it is obviously going to be unmanaged in almost all cases.
Double PS: I may incorrectly use the term 'Unmanned' within this repo, treat this as if I said unmanaged, it is a typo. I hope I got all of them though 😼(I probably didn't).
What is the general goal of this repo?
A robust and holistic set of documentation and related security tools to help people of any tech level enter the industry and serve customers safely as they move through their computer science/cyber security journey.
The framework is meant to create a solid base to which you can add more narrow scoped security applications on top or reverse engineer to further improve and tailor to your specific needs.
Unmanaged-server-sec-in20k.md
Unmanaged-server-sec-in20k.md is a markdown file discussing Unmanaged Server security, it is essentially a reference guide or long-winded manual. As one might intuit by the file name, it started as 20,000 characters of documentation on unmanaged server security. The markdown goes over a 'golden path', environment/infrastructure, operating systems, SSH security, software security (broad), maintenance/lifecycle, and a miscellaneous category. I'm trying to keep it relatively short as far as documentation goes: depth without absurd redundancy and otiose. This mainly helps people that are inexperienced with unmanaged server security, however I think even those experienced in cyber security ought to take a look: it's always good to see a new perspective or even some new ideas/tools you hadn't heard of. Security can change a lot, even in just a year for example.
I plan to make programs to automate most of, if not all of the content in Unmanaged-server-sec-in20k.md. These will be included as components in this repo as I finish them.