Specifically, a dedicated server running Debian 12.

After a monthly sudo apt upgrade? (Is a monthly upgrade even necessary?)

Never? (unless there is a security update?)

Edit: I may be missing kernel upgrades. Those are probably good... I can't remember if I installed a LTS kernel. I imagine it would be unsecure to post an exact kernel version, however.

  • Zvyozdochka [she/her, pup/pup's]
    ·
    17 hours ago

    I only really restart if there's a kernel update because I'm too lazy to do all the setup for live patching. If there's an update for something like Nginx, I restart the service after updating it. I try to stay on top of updates, especially security ones, for obvious reasons.

    server: nginx/x.x.x

    I also personally disable this, it's not really too important, but it's a little security by obscurity thing. Makes people scanning the internet for a specific (possibly vulnerable) version of Nginx a little bit harder.