SSH access to your WebTic VPS
SSH (Secure Shell) is the standard protocol for administering your VPS from the command line. Connecting with an SSH key is more secure than using a password.
Password login (initial access)
ssh root@YOUR_VPS_IP # or with a custom port ssh -p 2222 root@YOUR_VPS_IP
Your initial credentials are sent by email when the VPS is delivered.
SSH key authentication (recommended)
Step 1 — Generate a key pair (on your local machine)
ssh-keygen -t rsa -b 4096 -f ~/.ssh/webtic_vps -C "my-webtic-vps" # Creates: webtic_vps (private key) and webtic_vps.pub (public key)
Step 2 — Deploy the public key to the VPS
ssh-copy-id -i ~/.ssh/webtic_vps.pub root@YOUR_VPS_IP
Step 3 — Set up the SSH shortcut (~/.ssh/config)
Host webtic-vps HostName YOUR_VPS_IP User root IdentityFile ~/.ssh/webtic_vps Port 22 ServerAliveInterval 60 ServerAliveCountMax 3
ssh webtic-vps # Simplified connection
SSH hardening (/etc/ssh/sshd_config)
Port 2222 # Change the default port PermitRootLogin prohibit-password # Root by key only PasswordAuthentication no # Disable passwords MaxAuthTries 3 ClientAliveInterval 300 ClientAliveCountMax 2
systemctl restart sshd
fail2ban protection
apt install fail2ban # /etc/fail2ban/jail.local [sshd] enabled = true port = 2222 maxretry = 3 findtime = 600 bantime = 3600
systemctl enable --now fail2ban
Fail2ban automatically bans IPs that fail more than 3 times in 10 minutes, for 1 hour.
UFW firewall
ufw default deny incoming ufw default allow outgoing ufw allow 2222/tcp # SSH ufw allow 80/tcp # HTTP ufw allow 443/tcp # HTTPS ufw enable
VPS console access (if SSH is unreachable)
If you lose SSH access, use the KVM console from your WebTic client area → Manage VPS → VNC Console. This access bypasses the network and the firewall.
