{"id":11153,"date":"2026-06-20T15:36:45","date_gmt":"2026-06-20T15:36:45","guid":{"rendered":"https:\/\/bitep.net\/blog\/2026\/06\/20\/yeni-ubuntu-vps-tehlukesizlik-ayarlari\/"},"modified":"2026-06-20T15:36:45","modified_gmt":"2026-06-20T15:36:45","slug":"yeni-ubuntu-vps-tehlukesizlik-ayarlari","status":"publish","type":"post","link":"https:\/\/bitep.net\/blog\/2026\/06\/20\/yeni-ubuntu-vps-tehlukesizlik-ayarlari\/","title":{"rendered":"Yeni Ubuntu VPS ald\u0131qdan sonra edilm\u0259li 10 t\u0259hl\u00fck\u0259sizlik ayar\u0131"},"content":{"rendered":"

Yeni Ubuntu VPS ald\u0131qdan sonra onu birba\u015fa production istifad\u0259y\u0259 verm\u0259k d\u00fczg\u00fcn deyil. Server internet\u0259 a\u00e7\u0131q oldu\u011fu \u00fc\u00e7\u00fcn ilk saatlardan etibar\u0259n botlar t\u0259r\u0259find\u0259n skan edil\u0259 bil\u0259r. Buna g\u00f6r\u0259 \u0259sas t\u0259hl\u00fck\u0259sizlik ayarlar\u0131 \u0259vv\u0259lc\u0259d\u0259n qurulmal\u0131d\u0131r.<\/p>\n

1. Yeni sudo istifad\u0259\u00e7i yarad\u0131n<\/h2>\n

Server\u0259 yaln\u0131z root hesab\u0131 il\u0259 i\u015fl\u0259m\u0259k risklidir. G\u00fcnd\u0259lik idar\u0259etm\u0259 \u00fc\u00e7\u00fcn ayr\u0131ca istifad\u0259\u00e7i yarad\u0131lmal\u0131 v\u0259 ona sudo s\u0259lahiyy\u0259ti verilm\u0259lidir.<\/p>\n

2. SSH key il\u0259 giri\u015fd\u0259n istifad\u0259 edin<\/h2>\n

\u015eifr\u0259 il\u0259 SSH giri\u015fi brute-force h\u00fccumlar\u0131na daha a\u00e7\u0131qd\u0131r. SSH key istifad\u0259 edildikd\u0259 giri\u015f daha t\u0259hl\u00fck\u0259siz olur.<\/p>\n

3. Password login-i s\u00f6nd\u00fcr\u00fcn<\/h2>\n

SSH key u\u011furla test edildikd\u0259n sonra password login deaktiv edilm\u0259lidir. Bu add\u0131m avtomatik \u015fifr\u0259 yoxlama h\u00fccumlar\u0131n\u0131 xeyli azald\u0131r.<\/p>\n

4. UFW firewall aktiv edin<\/h2>\n

UFW il\u0259 yaln\u0131z laz\u0131m olan portlar a\u00e7\u0131lmal\u0131d\u0131r. SSH, HTTP v\u0259 HTTPS portlar\u0131 icaz\u0259li ola bil\u0259r. Database v\u0259 daxili servisl\u0259r internet\u0259 a\u00e7\u0131q saxlanmamal\u0131d\u0131r.<\/p>\n

5. Fail2Ban qurun<\/h2>\n

Fail2Ban u\u011fursuz login c\u0259hdl\u0259rini izl\u0259yir v\u0259 \u015f\u00fcbh\u0259li IP-l\u0259ri m\u00fcv\u0259qq\u0259ti bloklaya bilir.<\/p>\n

6. Sistem yenil\u0259m\u0259l\u0259rini edin<\/h2>\n

Yeni serverd\u0259 paketl\u0259r d\u0259rhal yenil\u0259nm\u0259lidir. Security update-l\u0259r gecikdikd\u0259 m\u0259lum bo\u015fluqlar a\u00e7\u0131q qala bil\u0259r.<\/p>\n

7. A\u00e7\u0131q portlar\u0131 yoxlay\u0131n<\/h2>\n

Serverd\u0259 hans\u0131 portlar\u0131n dinl\u0259diyini m\u00fct\u0259madi yoxlamaq laz\u0131md\u0131r.<\/p>\n

8. Backup plan\u0131 qurun<\/h2>\n

T\u0259hl\u00fck\u0259sizlik yaln\u0131z h\u00fccumun qar\u015f\u0131s\u0131n\u0131 almaq deyil, problem olduqda b\u0259rpan\u0131 da t\u0259min etm\u0259kdir.<\/p>\n

9. Monitoring aktiv edin<\/h2>\n

CPU, RAM, disk v\u0259 servis v\u0259ziyy\u0259ti izl\u0259nm\u0259lidir.<\/p>\n

10. Loglar\u0131 izl\u0259yin<\/h2>\n

Auth log, web server loglar\u0131 v\u0259 application loglar\u0131 t\u0259hl\u00fck\u0259sizlik hadis\u0259l\u0259rini anlamaq \u00fc\u00e7\u00fcn vacibdir.<\/p>\n

N\u0259tic\u0259<\/h2>\n

Ubuntu VPS t\u0259hl\u00fck\u0259sizliyi bir d\u0259f\u0259lik yox, davaml\u0131 prosesdir. SSH key, firewall, Fail2Ban, update, backup v\u0259 monitoring birlikd\u0259 t\u0259tbiq edildikd\u0259 server daha etibarl\u0131 olur.<\/p>\n","protected":false},"excerpt":{"rendered":"

Yeni Ubuntu VPS ald\u0131qdan sonra onu birba\u015fa production istifad\u0259y\u0259 verm\u0259k d\u00fczg\u00fcn deyil. Server internet\u0259 a\u00e7\u0131q oldu\u011fu \u00fc\u00e7\u00fcn ilk saatlardan etibar\u0259n botlar t\u0259r\u0259find\u0259n skan edil\u0259 bil\u0259r. Buna g\u00f6r\u0259 \u0259sas t\u0259hl\u00fck\u0259sizlik ayarlar\u0131 \u0259vv\u0259lc\u0259d\u0259n qurulmal\u0131d\u0131r. 1. Yeni sudo istifad\u0259\u00e7i yarad\u0131n Server\u0259 yaln\u0131z root hesab\u0131 il\u0259 i\u015fl\u0259m\u0259k risklidir. G\u00fcnd\u0259lik idar\u0259etm\u0259 \u00fc\u00e7\u00fcn ayr\u0131ca istifad\u0259\u00e7i yarad\u0131lmal\u0131 v\u0259 ona sudo s\u0259lahiyy\u0259ti verilm\u0259lidir. […]<\/p>\n","protected":false},"author":1,"featured_media":11152,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[31,17,18,41],"tags":[],"class_list":["post-11153","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber-security","category-hosting","category-technology","category-tutoriallar"],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/bitep.net\/blog\/wp-content\/uploads\/2026\/06\/yeni-ubuntu-vps-tehlukesizlik-ayarlari.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts\/11153","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/comments?post=11153"}],"version-history":[{"count":0,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts\/11153\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/media\/11152"}],"wp:attachment":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/media?parent=11153"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/categories?post=11153"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/tags?post=11153"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}