Loading NodeDrops...
Synchronizing state with peers
Synchronizing state with peers
Systematically step through essential server hardening, swap allocation, daemon isolation, and validator key safety. Progress is saved locally in your browser with zero server data storage.
localStorage. We never track your IP, server monikers, or checklist states on our servers.Disable root password login in /etc/ssh/sshd_config and enforce public key authentication.
ssh-keygen -t ed25519 -C 'node-operator'Default deny incoming. Allow only SSH and specific P2P ports (e.g. 30303, 9000, 26656). Keep RPC ports closed.
sudo ufw default deny incoming && sudo ufw allow 22/tcp && sudo ufw enablePrevent Out-Of-Memory (OOM) killer from terminating the node process during heavy block gossip bursts.
sudo fallocate -l 8G /swapfile && sudo chmod 600 /swapfile && sudo mkswap /swapfile && sudo swapon /swapfileConsensus engines require precision timestamps. Severe clock drift leads to rejected blocks.
sudo timedatectl set-ntp true && timedatectl statusRun node daemons under a dedicated daemon user (e.g. 'ethereum' or 'celestia') without sudo permissions.
sudo useradd -r -s /usr/sbin/nologin -d /var/lib/node nodeuserFor PoS paired clients (Execution & Consensus), generate a 32-byte secret with 600 permissions.
openssl rand -hex 32 | sudo tee /var/lib/node/jwt.hex > /dev/nullEnsure the node daemon restarts automatically upon failure and boots with the operating system.
sudo systemctl daemon-reload && sudo systemctl enable --now node.serviceSafely copy key stores or mnemonic phrases to encrypted offline physical storage. Never store in plaintext on the VPS.