Differences

This shows you the differences between two versions of the page.

--- setting_up_a_debian_server [2024/03/17 16:45] – [Preparations] thomas
+++ setting_up_a_debian_server [2024/03/19 21:50] (current) – [Afterwards] thomas
@@ Line 11: / Line 11: @@
 First, download the latest version of Debian from [[https://www.debian.org/distrib/|]]. I recommend downloading a complete installation image as nowadays, it easily fits on a DVD or USB thumbdrive.
-Then, write the image to a DVD or USB drive and boot your server from it. You may need to access the boot menu or BIOS to do so. On amd64, make sure to use UEFI as boot method, and not legacy boot.
+Then, write the image to a DVD or [[writing_a_disk_image_to_a_disk|USB drive]] and boot your server from it. You may need to access the boot menu or BIOS to do so. On amd64, make sure to use UEFI as boot method, and not legacy boot.
 When the boot menu appears, choose the regular ''Install'' method, instead of the ''Graphical Install''. This avoids issues if the display driver for your server is unsupported.
@@ Line 33: / Line 33: @@
 When asked to create a user account, enter your own full name. Next, choose a short username and password. Store the password securely.
-When asked how to partition the disk, choose ''Guided - use entire disk and set up encrypted LVM''.
+When asked how to partition the disk, choose ''Guided - use entire disk and set up encrypted LVM''. Then select the disk you want to use and choose to store all files in one partition.
+Wait until the disk is overwritten with random data, then set the password for your LUKS volume and store it in a safe location. When asked to set the size for the volume group, enter ''max''.
+When asked to use a network mirror, I recommend to choose yes and choose a mirror from your country.
+When asked to participate in the package usage survey, choose ''No''.
+When asked what software should be installed, make sure only ''SSH server'' and ''standard system utilities'' are selected.
+===== Afterwards =====
+  * Comment out the DVD source in ''/etc/apt/sources.list''.
+  * Set boot order to boot from OS drive only, and lock the BIOS with a password, if possible.
+  * Set up automatic updates.
+  * Only allow SSH connections via public key encryption.
+{{tag>Debian Howto}}