First Steps After Receiving an Unmanaged VPS

Got your root credentials — now what? System update, create user, disable root SSH, configure firewall — 8 essential first steps.
What is an Unmanaged VPS?
An unmanaged VPS gives you a virtual server with full root access and zero intervention from the hosting provider. No automatic updates, no pre-configured settings, no control panel. You are entirely responsible for everything that happens inside your server.
This option suits developers and system administrators who want complete control without restrictions. But without a clear plan from the start, you can waste hours on configurations that should take minutes.
Step 1: Connect to Your Server
After activating your VPS from CLOUD and receiving your credentials, the first thing you do is connect via SSH:
ssh root@your-server-ip
On Windows, use PuTTY or Windows Terminal with built-in OpenSSH. On macOS and Linux, the command works directly from Terminal.
First command after login:
apt update && apt upgrade -y
This updates all installed packages to the latest security versions. Never skip this step.
Step 2: Secure Access
Change the SSH Port
Default port 22 is a constant target for brute-force attacks. Change it to a random number:
nano /etc/ssh/sshd_config
# Change Port 22 to Port 2847
systemctl restart sshd
Create a Non-Root User
Working with root privileges at all times is dangerous. Create a dedicated user:
adduser deploy
usermod -aG sudo deploy
Enable Key-Based Authentication
Generate an SSH key on your local machine and copy the public key to the server:
ssh-keygen -t ed25519
ssh-copy-id deploy@your-server-ip
Then disable password login entirely in your SSH configuration.
Step 3: Configure the Firewall
UFW is the simplest firewall management tool on Ubuntu:
ufw default deny incoming
ufw default allow outgoing
ufw allow 2847/tcp # New SSH port
ufw allow 80/tcp # HTTP
ufw allow 443/tcp # HTTPS
ufw enable
Make sure you allow your new SSH port before enabling the firewall — otherwise you lock yourself out.
Step 4: Set Up Your Web Stack
Option 1: LEMP Stack
apt install nginx mysql-server php-fpm php-mysql -y
Option 2: Docker
curl -fsSL https://get.docker.com | sh
apt install docker-compose -y
Docker provides greater flexibility when running multiple applications on the same server.
Step 5: Backup From Day One
Do not wait until something breaks. Set up automated backups from the very first day:
- Databases: mysqldump or pg_dump with a daily cron schedule
- Files: rsync to a secondary server or cloud storage
- CLOUD offers daily backup services starting at affordable pricing — pricing and plans per year
Step 6: Basic Monitoring
Install simple monitoring tools:
apt install htop vnstat -y
- htop: Real-time CPU and memory usage monitoring
- vnstat: Daily and monthly network traffic tracking
For advanced monitoring, install Netdata or Prometheus with Grafana.
Common Mistakes to Avoid
| Mistake | Consequence | Solution |
|---|---|---|
| Always working as root | One breach = total loss | Regular user + sudo |
| Not updating the system | Exposed security vulnerabilities | Weekly scheduled updates |
| No firewall | All ports open to the world | UFW from minute one |
| No backups | Irreversible data loss | Daily automated backups |
| Ignoring logs | Problems grow unnoticed | Daily /var/log review |
The Right Start
An unmanaged VPS gives you complete freedom — but freedom comes with responsibility. The six steps above cover everything you need in the first hour after server activation.
If you want a Saudi server ready in under a minute with full root access, CLOUD (cloud.net.sa) offers VPS plans starting at competitive pricing — pricing and plans per year with very low latency from Riyadh and a SLA عالي مع ضمان تعاقدي.
Get Started
Want to try it yourself? Choose the right hosting plan or build your custom server with the specs you need.
