Securing OpenEMR - Linux

[under review]

Change page name to "Linux Security"

1 Enable UFW

• Set Up UFW to Allow 22, 80, & 443 and limit Brute Force attacks:
  • Allow 80 and 443
  • sudo ufw allow ‘Apache Full’
• Allow SSH
  • sudo ufw allow ssh
• Prevent SSH Bruteforce Attachs
  • sudo ufw limit ssh

2 Set Passwords For User

• passwd
  • <enter your password>

1. 2 Enable ClamAV?

1. 3 Enable Secure NTP?

1. 4 Enable CSF?

1. 5 Passwords for root and regular user?

1. 6 Probably need a section on SSH keys for all those who don't use a cloud provider where keys are default