Welcome to Best Practices for Building a Debian Server

Under contruction This site is mostly u nder construction now Welcome! This site is dedicated to helping you build a secure, efficient, and stable Debian 12 server from the ground up. Whether you’re managing a home lab, spinning up a VPS, or deploying a production box, the best practices here aim to give you a rock-solid foundation — no fluff, just what works. Who is this for? This guide assumes you’re starting with a bare-bones Debian 12 (“bookworm”) installation, using the minimal netinst ISO. The only thing installed is ssh, so we build everything else step by step. ...

June 28, 2025 · 1 min

Download, Verify and Create USB Stick

At the time of writing, Debian 12.5 was the current release. Update the names where necessary. Download the latest file as well as the checksum files wget https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-12.5.0-amd64-netinst.iso wget https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/SHA512SUM Compare the checksums sha512sum debian-12.5.0-amd64-netinst.iso grep debian-12.11.0-amd64-netinst.iso SHA512SUMS they should match. Further, you can also download SHA512SUM.sign and check whether the SHA512SUM is legit using gpg. (I will expand on this later on) Note: there is also a mini.iso image available, which is normally around 70M and used for once-off installations with high internet speeds. ...

June 28, 2025 · 3 min

SSH and Remote Access

Secure shell (SSH) lets you access remote machines securely. Here’s a basic command to connect to a remote server: ssh user@remote-ip and the it continues

June 28, 2025 · 1 min