
In order to log into MariaDB to secure it, we'll need the current SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY! NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB This will remove anonymous users and the test database, disable remote root login, and load these new rules so that MariaDB immediately respects the changes you have made. Rest, you can press Y and then ENTER to accept the defaults for all the subsequent questions. This script will remove some insecure default settings and lock down anonymous access to your database system. We recommend that you should run a security script comes pre-installed with MariaDB. You need to install the database system to be able to store and manage data for your site.

Since you haven't configured SSL for your server yet, for now you only need to allow HTTP traffic on port 80.

If you have the ufw firewall running, you will need to allow connections to Nginx. On Debian 10, Nginx is configured to start running upon installation. If this is the first time you'll be using apt on Debian 10, you should start off by updating your local package index and then install the nginx server:

You will need one Debian 10 (physical or virtual) machine configured with a non-root user having sudo privileges.
