I am thinking of using a *BSD for a remote NAS VPS. I'm comfortable with linux. I was having trouble finding guides on how to harden a BSD at the basic level. SSH lockdown? Is there perhaps a better way to connect like over a VPN or something for this type of use case?
Just disable any services you aren't using, and look at the system specific information for any services that remain. The services and protocols are essentially the same - for example if you're using webdav you can use the same httpd you're familiar with on linux.
Comments
I am thinking of using a *BSD for a remote NAS VPS. I'm comfortable with linux. I was having trouble finding guides on how to harden a BSD at the basic level. SSH lockdown? Is there perhaps a better way to connect like over a VPN or something for this type of use case?
And for hardening ssh:
https://github.com/bsdlabs/ssh-hardening
Then lock-down with PF (firewall).
Overall hardened FreeBSD:
https://hardenedbsd.org/
Or take parts of this Gist:
https://gist.github.com/jahil/4565d8dfa06254f0c11d
Just disable any services you aren't using, and look at the system specific information for any services that remain. The services and protocols are essentially the same - for example if you're using webdav you can use the same httpd you're familiar with on linux.
ssh works exactly the same as on linux as well.