Best VPS Setup for Wazuh

A practical baseline for running a small Wazuh deployment on a VPS.

For a small Wazuh lab, start with a modern Linux distribution, 4 vCPU, 8 GB RAM and fast SSD/NVMe storage. Keep enough free disk space for index growth and avoid exposing management interfaces directly to the internet.

Baseline architecture

• Ubuntu or another supported Linux distribution.
• 4 vCPU and 8 GB RAM for a comfortable small lab.
• 80-160 GB SSD/NVMe depending on retention.
• SSH restricted by firewall and keys.
• TLS enabled for web interfaces and agent communication.
• Automated snapshots or provider backups.

Security hardening

Use least-privilege firewall rules, disable password SSH when possible, patch the host, and avoid using the Wazuh dashboard as an internet-facing public service. A VPN or trusted-source restriction is usually safer.