Linux
Ubuntu Linux server
Deployment, hardening and service configuration on LTS releases. The distribution we most often choose for web applications, container platforms and database servers.
- Long-term support release
- LTS
- Standard security support
- 5 years
- Broad package ecosystem
- APT
- Key-based access
- SSH / VPN
Why an LTS release?
Ubuntu's six-monthly interim releases carry newer packages but have a short support window. On a production server that means planning an upgrade every nine months. LTS releases receive five years of standard security support, which is why we prefer them for production.
Package selection is kept minimal at install time. On a production server every unused service consumes resources and widens the attack surface. Only the required components are installed; the rest are disabled.
For access, password-based SSH is disabled in favour of key-based authentication. The SSH port is also never exposed directly to the internet — access runs through a VPN tunnel terminated on pfSense. Together these eliminate automated password-guessing traffic against your servers.
The security update policy is decided during deployment. Automatic security patching is the right default in most scenarios; where an application has sensitive dependencies, patches are applied manually in a planned window.
- LTS release with five years of security support
- Minimal package installation, narrow attack surface
- Password SSH disabled, key-based access only
- SSH not exposed to the internet, kept behind VPN
- Security patching policy decided at deployment
Features
Common use cases
Web application server
Nginx or Apache, PHP-FPM, Node.js and Python applications are deployed with process management configured.
Database server
PostgreSQL, MySQL or MariaDB deployment with memory and connection settings tuned to the workload.
Container platform
Servers prepared for Docker-based deployments, with registry access and a storage plan designed together.
CI/CD runner
A dedicated server for build and deployment pipelines, placed in a segment isolated from production.
Worker server
A separate server for queue consumers and scheduled jobs, so they never consume web tier resources.
Hardened baseline
Unnecessary services disabled, firewall rules written and the monitoring agent configured.
FAQ
Frequently asked questions
Will I have root access?
Yes. You have full privileges on the server. What we take on is the infrastructure, network security, backup and monitoring; control of the operating system stays with you.
Which Ubuntu version is installed?
We install the current LTS release. If your application depends on a specific version we discuss it before deployment, and where an older release is required we review its support status and security implications with you.
How are version upgrades handled?
LTS-to-LTS upgrades are applied in a planned maintenance window with a snapshot taken beforehand. Application dependency compatibility is checked in advance, and a rollback is available if something breaks.
More
Related pages
- LinuxDebian and AlmaLinux serversStability-focused Debian and RHEL-compatible AlmaLinux deployments. Minimal packages, SELinux/AppArmor configuration, Veeam backup and Zabbix monitoring included.
- Cloud ServerEnterprise cloud server infrastructureEnterprise cloud servers on VMware ESXi with NVMe SSD and 10 Gbps isolated VLAN. Deployment, SPLA licensing and Veeam backup included; Istanbul and Europe locations.
- Custom BuildsFreeBSD and custom operating system buildsFreeBSD, ZFS-based storage and custom image deployments. For systems outside the standard distributions, compatibility, backup and support scope are planned in advance.
Let's plan your infrastructure together
Tell us what you need and we prepare a configuration and pricing specific to you. We don't sell fixed packages; we build the deployment, licensing and backup plan with you.