Deploying Webmin on RamNode VPS

Before starting, ensure you have:

Connect to your RamNode VPS via SSH and update the system packages:

ssh root@your-server-ip

sudo apt update && sudo apt upgrade -y

Webmin requires several packages to function properly:

sudo apt install -y software-properties-common apt-transport-https wget curl gnupg2

Add the official Webmin repository to ensure you get the latest stable version:

curl -fsSL https://download.webmin.com/jcameron-key.asc | sudo gpg --dearmor -o /usr/share/keyrings/webmin.gpg

echo "deb [signed-by=/usr/share/keyrings/webmin.gpg] https://download.webmin.com/download/repository sarge contrib" | sudo tee /etc/apt/sources.list.d/webmin.list

Update the package list and install Webmin:

sudo apt update
sudo apt install -y webmin

Allow access to Webmin's port through your firewall:

For UFW (Uncomplicated Firewall):

sudo ufw allow 10000/tcp
sudo ufw reload

For iptables:

sudo iptables -A INPUT -p tcp --dport 10000 -j ACCEPT
sudo iptables-save > /etc/iptables/rules.v4

Open your web browser and navigate to your server's IP address on port 10000:

https://your-server-ip:10000

Log in using your system's root credentials or any sudo-enabled user account.

After installation, implement these security best practices:

Change the Default Port

Changing the default port reduces automated attacks targeting port 10000:

sudo nano /etc/webmin/miniserv.conf

# Change the line:
port=10000

# To a custom port (e.g., 12321):
port=12321

sudo systemctl restart webmin

Replace the self-signed certificate with a trusted Let's Encrypt certificate:

Option 1: Via Webmin Interface

1. Log into Webmin and navigate to Webmin → Webmin Configuration → SSL Encryption
2. Click on the "Let's Encrypt" tab
3. Enter your domain name in the "Hostname" field
4. Click "Request Certificate"

Option 2: Using Certbot

sudo apt install -y certbot
sudo certbot certonly --standalone -d webmin.yourdomain.com

sudo nano /etc/webmin/miniserv.conf

keyfile=/etc/letsencrypt/live/webmin.yourdomain.com/privkey.pem
certfile=/etc/letsencrypt/live/webmin.yourdomain.com/fullchain.pem

sudo systemctl restart webmin

Limit Webmin access to specific IP addresses for enhanced security:

sudo nano /etc/webmin/miniserv.conf

# Add these lines (replace with your IP):
allow=192.168.1.100 10.0.0.0/24

Alternatively, configure IP restrictions through the Webmin interface at Webmin → Webmin Configuration → IP Access Control.

Add an extra layer of security with TOTP-based two-factor authentication:

1. In Webmin, go to Webmin → Webmin Configuration → Two-Factor Authentication
2. Select "Google Authenticator" as the provider
3. Click "Enroll For Two-Factor Authentication"
4. Scan the QR code with your authenticator app

Here are some essential tasks you can perform with Webmin:

Webmin's functionality can be extended with additional modules:

To install a module, go to Webmin → Webmin Configuration → Webmin Modules and either install from the official repository or upload a .wbm file.

Webmin receives regular updates with security patches and new features:

sudo apt update && sudo apt upgrade webmin

Or within Webmin, navigate to Webmin → Webmin Configuration → Upgrade Webmin.