Preliminary Actions

First you need to update your server. To do this, enter a simple command:

apt update && upgrade

It is worth noting that the installation is not difficult, since Fail2Ban is already included in the repositories of your Debian 11. Installation is easy, just enter the command:

apt install fail2ban

After you set it up, please check. The verification step is extremely important for making future adjustments:

systemctl status fail2ban

If Fail2ban is not running on your instance, you need to run it. This can be done with the following command:

systemctl start fail2ban

Next, move on to configuring Fail2ban. This is necessary for proper launch. Enter the following command:

systemctl enable fail2ban

Configuring Fail2Ban

If the first installation step was successfully completed and verified, then you can proceed to the Fail2ban configuration. Fail2ban is installed bundled with a default configuration file. This file contains configurable settings in Fail2ban. The file location is as follows:

/etc/fail2ban/jail.conf

The file contains settings known as filters for configuring Fail2ban. This tool also has many options in its configuration file. These options can be useful for specific scripts and services that work with each other on your Linux machine.

• The bantime value is the exact time during which the malicious IP is blocked
• The maxretry value – The number of times the user will try to login. If the limit is exceeded, the IP address is blocked.
• The ignoreip value is the networks you trust. All networks you enter here will bypass Fai2Ban filtering.
• The enable value allows Fail2ban to confirm whether you want this jail to be enabled or disabled.

Next is to talk about jails. It has an individual customization option. Jails can increase the security of your Linux computer in many ways. You can add different filters to your server services. The first step is to create the jail.local configuration file. You can do it like this:

touch /etc/fail2ban/jail.local

Open jail.local in a text editor of your choice.

nano /etc/fail2ban/jail.local.

After the clarifications above have been provided regarding hail conf. you will be able to apply this directly to the configuration.

enabled = true
port = ssh
bantime = 10h
maxretry = 12
ignoreip = Any_IP

[apache-badbots]
enabled = true
port = http,https, smtp...
bantime = 72h
maxretry = 3

[squid]
enabled = false
port = 80,443,25, 1234...

Install Node.js.

In order to install Node.js you need to enter the following:

apt-get update
curl -sL https://deb.nodesource.com/setup_8.x | sudo -E bash -
apt-get install -y nodejs

Install Yarn

Yarn is Facebook’s very easy-to-use package manager for Node.js packages. Recommended for installation! This can be done as follows:

curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | sudo apt-key add -
echo "deb https://dl.yarnpkg.com/debian/ stable main" | sudo tee /etc/apt/sources.list.d/yarn.list
apt-get update && apt-get install yarn

Install Node.js app

If your application is hosted in a git repository, you need to clone it and then use the command:

yarn install

Then you install Process Manager 2. This is a special package that automatically launches applications. It is a very reliable tool; proof of this is that this tool is used by PayPal, Microsoft. You can install it using the following command:

yarn global add pm2

The next step is to add the application as your personal process. It will run in background mode. To do this, you can use the following command:

pm2 start [path to your entry.js] -i max

Automatically Launch the App at Boot Mode

After starting the application, save the application configuration. Then run the startup command to automatically start Process Manager 2 in the background when you boot Ubuntu. For Ubuntu 16.04 Process Manager 2 will bind to systemd

pm2 save
pm2 startup 

After successfully entering these commands, the Node.js application will crash due to an error, it will restart then immediately automatically. However, if Ubuntu crashes for any reason, the process will automatically restart from Ubuntu