CLOUD
Guides

First Steps After Receiving an Unmanaged VPS

CLOUD|September 15, 2025|3 min read|642 views
First Steps After Receiving an Unmanaged VPS

Got your root credentials — now what? System update, create user, disable root SSH, configure firewall — 8 essential first steps.

What is an Unmanaged VPS?

An unmanaged VPS gives you a virtual server with full root access and zero intervention from the hosting provider. No automatic updates, no pre-configured settings, no control panel. You are entirely responsible for everything that happens inside your server.

This option suits developers and system administrators who want complete control without restrictions. But without a clear plan from the start, you can waste hours on configurations that should take minutes.

Step 1: Connect to Your Server

After activating your VPS from CLOUD and receiving your credentials, the first thing you do is connect via SSH:

ssh root@your-server-ip

On Windows, use PuTTY or Windows Terminal with built-in OpenSSH. On macOS and Linux, the command works directly from Terminal.

First command after login:

apt update && apt upgrade -y

This updates all installed packages to the latest security versions. Never skip this step.

Step 2: Secure Access

Change the SSH Port

Default port 22 is a constant target for brute-force attacks. Change it to a random number:

nano /etc/ssh/sshd_config
# Change Port 22 to Port 2847
systemctl restart sshd

Create a Non-Root User

Working with root privileges at all times is dangerous. Create a dedicated user:

adduser deploy
usermod -aG sudo deploy

Enable Key-Based Authentication

Generate an SSH key on your local machine and copy the public key to the server:

ssh-keygen -t ed25519
ssh-copy-id deploy@your-server-ip

Then disable password login entirely in your SSH configuration.

Step 3: Configure the Firewall

UFW is the simplest firewall management tool on Ubuntu:

ufw default deny incoming
ufw default allow outgoing
ufw allow 2847/tcp # New SSH port
ufw allow 80/tcp # HTTP
ufw allow 443/tcp # HTTPS
ufw enable

Make sure you allow your new SSH port before enabling the firewall — otherwise you lock yourself out.

Step 4: Set Up Your Web Stack

Option 1: LEMP Stack

apt install nginx mysql-server php-fpm php-mysql -y

Option 2: Docker

curl -fsSL https://get.docker.com | sh
apt install docker-compose -y

Docker provides greater flexibility when running multiple applications on the same server.

Step 5: Backup From Day One

Do not wait until something breaks. Set up automated backups from the very first day:

  • Databases: mysqldump or pg_dump with a daily cron schedule
  • Files: rsync to a secondary server or cloud storage
  • CLOUD offers daily backup services starting at affordable pricing — pricing and plans per year

Step 6: Basic Monitoring

Install simple monitoring tools:

apt install htop vnstat -y
  • htop: Real-time CPU and memory usage monitoring
  • vnstat: Daily and monthly network traffic tracking

For advanced monitoring, install Netdata or Prometheus with Grafana.

Common Mistakes to Avoid

Mistake Consequence Solution
Always working as root One breach = total loss Regular user + sudo
Not updating the system Exposed security vulnerabilities Weekly scheduled updates
No firewall All ports open to the world UFW from minute one
No backups Irreversible data loss Daily automated backups
Ignoring logs Problems grow unnoticed Daily /var/log review

The Right Start

An unmanaged VPS gives you complete freedom — but freedom comes with responsibility. The six steps above cover everything you need in the first hour after server activation.

If you want a Saudi server ready in under a minute with full root access, CLOUD (cloud.net.sa) offers VPS plans starting at competitive pricing — pricing and plans per year with very low latency from Riyadh and a SLA عالي مع ضمان تعاقدي.


Get Started

Want to try it yourself? Choose the right hosting plan or build your custom server with the specs you need.

Share