https://blog.waawo.space/tags/vps/Recent content in VPS on blogHugozh-cnMon, 30 Mar 2026 18:20:00 +0800https://blog.waawo.space/posts/vps-init/Mon, 30 Mar 2026 18:20:00 +0800https://blog.waawo.space/posts/vps-init/<p>每次拿到新 VPS 都要做一遍同样的事，整理成清单备用。</p> <h2 id="1-更换-root-密码">1. 更换 root 密码</h2> <p>拿到机器第一件事：</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>passwd </span></span></code></pre></div><h2 id="2-更新系统">2. 更新系统</h2> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span><span style="color:#75715e"># Debian/Ubuntu</span> </span></span><span style="display:flex;"><span>apt update <span style="color:#f92672">&amp;&amp;</span> apt upgrade -y </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span><span style="color:#75715e"># 安装常用工具</span> </span></span><span style="display:flex;"><span>apt install -y curl wget git vim htop ufw fail2ban </span></span></code></pre></div><h2 id="3-创建普通用户">3. 创建普通用户</h2> <p>不要直接用 root 操作：</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>adduser waawo </span></span><span style="display:flex;"><span>usermod -aG sudo waawo </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span><span style="color:#75715e"># 切换到新用户</span> </span></span><span style="display:flex;"><span>su - waawo </span></span></code></pre></div><h2 id="4-配置-ssh-密钥登录">4. 配置 SSH 密钥登录</h2> <p>在本机生成密钥（如果还没有的话）：</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>ssh-keygen -t ed25519 -C <span style="color:#e6db74">&#34;your@email.com&#34;</span> </span></span></code></pre></div><p>把公钥上传到服务器：</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>ssh-copy-id waawo@your-server-ip </span></span></code></pre></div><p>或者手动复制 <code>~/.ssh/id_ed25519.pub</code> 内容到服务器的 <code>~/.ssh/authorized_keys</code>。</p> <h2 id="5-禁用-ssh-密码登录">5. 禁用 SSH 密码登录</h2> <p>确认密钥登录正常后，再修改 <code>/etc/ssh/sshd_config</code>：</p>