February 12, 2026•2 min read••
Tags ▼
- ubuntu
- self hosting
- security
- home server
Ubuntu Home Server Hardening Checklist for 2026
Most self-hosting guides show you how to install things.
Very few show you how to keep those things safe over time.
If you are running Ubuntu at home, this baseline is what I consider the minimum.
Not enterprise-perfect.
Just practical and repeatable.
SSH First, Always
I lock this down before installing anything else:
- key-based auth only
- root login disabled
- least-privilege user for daily admin
If I need remote access, I prefer private network access (Tailscale) over exposing SSH publicly.
Update Policy Beats Panic Updates
Random updates are where mistakes happen.
I use a boring cadence:
- unattended security updates enabled
- fixed weekly patch window
- reboot intentionally after kernel-level changes
Consistency makes maintenance calmer.
Firewall Defaults Should Be Strict
The baseline:
- deny inbound by default
- allow only what is required
- avoid public ports when private access works
Open by exception, not by habit.
Container Isolation Reduces Blast Radius
I run services in containers whenever possible.
This gives me:
- cleaner dependency boundaries
- simpler rollback options
- less collateral damage when one service breaks
Monitoring and Backups Are Part of Security
I monitor a small set of signals:
- disk usage
- memory pressure
- container restart loops
- cert expiry
And I treat backups as incomplete until restore is tested.
Daily backup without a restore drill is false confidence.
Final Thought
Hardening is not one command. It is a routine.
If your server feels boring in production, you are doing it right.
FAQ
What is the first hardening change I should make?
Lock down SSH access first (keys only, no root login, strong user policy). It reduces immediate exposure.
How often should I patch a home server?
Apply security updates regularly, ideally on a weekly schedule, with a quick restart and health check routine.
Are backups enough for security?
Not by themselves. Backups matter only if restore tests are part of your routine.
Related reading
Get New Posts
Follow on your preferred channel for new articles, notes, and experiments.