Every public IPv4 address on the internet is subjected to automated bot scans within minutes of deployment. Running a production web server demands a proactive security posture. BoltPane implements defense-in-depth security out of the box. ### Key Hardening Measures: 1. **Disable Password Authentication**: Enforce public-key authentication for SSH. 2. **Move Default SSH Port**: Switch from port 22 to a non-standard port like 2222 to reduce 99% of automated port scanner noise. 3. **Configure UFW Firewall**: Only expose HTTP (80), HTTPS (443), and your secure SSH port. 4. **Enable Fail2ban Jails**: Automatically ban IP addresses that generate repeated 401 unauthorized attempts.