I have recently subscribed a Linux VPS hosting plan which I am planning to use (mostly) as a SVN server for version-controling sensitive documents (like, for example, drafts of theses and results of scientific research). I have been reading a lot about online security lately and I know I should...
- Use a firewall (
ip6tables) to block all input and output IPv4/IPv6 traffic by default, opening only the ports that I really need to use.
- Change SSH's default port to something else, disable
rootlogin and password authentication.
fail2banto block hosts that attempt connections to closed ports, portscans and the like.
- Keep my system up-to-date and only use packages from trusted sources.
However, somehow this alone doesn't make me feel safe enough to host data that, if stolen, could ruin a work of years. Is there anything else I should keep in mind when securing my server? Or is all this too much paranoia of me about security?