How to: Table of Contents
- [Introduction](#introduction)
  - [Guide Objective](#guide-objective)
  - [Why Secure Your Server](#why-secure-your-server)
  - [Why Yet Another Guide](#why-yet-another-guide)
  - [Other Guides](#other-guides)
  - [To Do / To Add](#to-do--to-add)
- [Guide Overview](#guide-overview)
  - [About This Guide](#about-this-guide)
  - [My Use-Case](#my-use-case)
  - [Editing Configuration Files - For The Lazy](#editing-configuration-files---for-the-lazy)
  - [Contributing](#contributing)
- [Before You Start](#before-you-start)
  - [Identify Your Principles](#identify-your-principles)
  - [Picking A Linux Distribution](#picking-a-linux-distribution)
  - [Installing Linux](#installing-linux)
  - [Pre/Post Installation Requirements](#prepost-installation-requirements)
  - [Other Important Notes](#other-important-notes)
  - [Using Ansible Playbooks to secure your Linux Server](#using-ansible-playbooks-to-secure-your-linux-server)
- [The SSH Server](#the-ssh-server)
  - [Important Note Before You Make SSH Changes](#important-note-before-you-make-ssh-changes)
  - [SSH Public/Private Keys](#ssh-publicprivate-keys)
  - [Create SSH Group For AllowGroups](#create-ssh-group-for-allowgroups)
  - [Secure `/etc/ssh/sshd_config`](#secure-etcsshsshd_config)
  - [Remove Short Diffie-Hellman Keys](#remove-short-diffie-hellman-keys)
  - [2FA/MFA for SSH](#2famfa-for-ssh)
- [The Basics](#the-basics)
  - [Limit Who Can Use sudo](#limit-who-can-use-sudo)
  - [Limit Who Can Use su](#limit-who-can-use-su)
  - [Run applications in a sandbox with FireJail](#run-applications-in-a-sandbox-with-firejail)
  - [NTP Client](#ntp-client)
  - [Securing /proc](#securing-proc)
  - [Force Accounts To Use Secure Passwords](#force-accounts-to-use-secure-passwords)
  - [Automatic Security Updates and Alerts](#automatic-security-updates-and-alerts)
  - [More Secure Random Entropy Pool (WIP)](#more-secure-random-entropy-pool-wip)
  - [Add Panic/Secondary/Fake password Login Security System](#add-panic-secondary-fake-password-login-security-system)
- [The Network](#the-network)
  - [Firewall With UFW (Uncomplicated Firewall)](#firewall-with-ufw-uncomplicated-firewall)
  - [iptables Intrusion Detection And Prevention with PSAD](#iptables-intrusion-detection-and-prevention-with-psad)
  - [Application Intrusion Detection And Prevention With Fail2Ban](#application-intrusion-detection-and-prevention-with-fail2ban) 
  - [Application Intrusion Detection And Prevention With CrowdSec](#application-intrusion-detection-and-prevention-with-crowdsec)
- [The Auditing](#the-auditing)
  - [File/Folder Integrity Monitoring With AIDE (WIP)](#filefolder-integrity-monitoring-with-aide-wip)
  - [Anti-Virus Scanning With ClamAV (WIP)](#anti-virus-scanning-with-clamav-wip)
  - [Rootkit Detection With Rkhunter (WIP)](#rootkit-detection-with-rkhunter-wip)
  - [Rootkit Detection With chrootkit (WIP)](#rootkit-detection-with-chrootkit-wip)
  - [logwatch - system log analyzer and reporter](#logwatch---system-log-analyzer-and-reporter)
  - [ss - Seeing Ports Your Server Is Listening On](#ss---seeing-ports-your-server-is-listening-on)
  - [Lynis - Linux Security Auditing](#lynis---linux-security-auditing)
  - [OSSEC - Host Intrusion Detection](#ossec---host-intrusion-detection)
- [The Danger Zone](#the-danger-zone)
- [The Miscellaneous](#the-miscellaneous)
  - [MSMTP (Simple Sendmail) with Google](#msmtp-alternative)
  - [Gmail and Exim4 As MTA With Implicit TLS](#gmail-and-exim4-as-mta-with-implicit-tls)
  - [Separate iptables Log File](#separate-iptables-log-file)
- [Left Over](#left-over)
  - [Contacting Me](#contacting-me)
  - [Helpful Links](#helpful-links)
  - [Acknowledgments](#acknowledgments)
  - [License and Copyright](#license-and-copyright)

(TOC made with [nGitHubTOC](https://imthenachoman.github.io/nGitHubTOC/))