I've fiddel with TKL 12 a tiny bit using a VM, and now I jsut provisioned a VPS over at Host VIrtual(vr.org) running the Turnkey linux LAMP stack v11.2
They said they will have v12 in a few weeks, but I can't really wait that long. Will I be able to easily migrate from 11.2 to 12.0 using TKLBAM and the backup on amazon?
Also, I noticed that the logs visible on the web gui can show the changes made through that web gui, but it won't show any changes I make via the command line. Does the TKLBAM track ALL** changes made to the system? or just those done via the web interface?
** -> Changes such as adding software in via apt in the command line or from source, and other various configuration file changes?
Also, I was wondering what people do to secure their system when they first get a fresh Turnkey linux going. Are the default settings secure enough? or are their a few things you do. For starters, I would probably:
- add another account and disable the root account
- setup ssh keys
- install fail2ban
- implement a boilerplate iptables setup
- check that unused processes are turned off
I know the creators of TKL are security minded, so perhaps you guys have a routine you go through when starting up a fresh turnkey machine? or even better some scripts?
Lamp stacks are pretty easy to setup without turnkey, but it's nice how the outgoing email is setup already and I really want to take advantage of TKLBAM system.
Sorry for the mashup of questions, but they cover all my concerns I have right now as a new TKL user. Your replies are much appreciated, Thanks.