This part moves you from practice mode to real production thinking. Production servers are not playgrounds. Every decision here affects security, uptime, and trust.
A production server is a system that serves real users. If it goes down, business stops. That is why discipline matters more than shortcuts.
adduser appuser
usermod -aG sudo appuser
Root should be used only for emergencies. Daily work should always be done via a limited user.
nano /etc/ssh/sshd_config
Change:
PermitRootLogin no
Restart SSH:
systemctl restart ssh
/var/www → application code
/etc → configuration files
/opt → optional tools
/var/log → logs
Random folders and messy structure is a sign of beginner setup. Professionals keep servers predictable.
Open servers are scanned automatically by bots. You are not attacked because you are important — you are attacked because you exist.
Production server is not your laptop. It is a shared responsibility between you, your team, and the business.
Next: IAM & Linux Permissions →