Documentation

Guides written by the people who run the servers.

No content-marketing filler and no tutorials that stop before the hard part. Every command here has been run on the platform it describes.

Getting started2 Security2 Networking4 Operations3 API & automation3

Getting started

From payment to a working server.

First steps after deployment

Prepare a delivered VPS with updates, a non-root user, SSH keys, a firewall and a tested backup plan.

8 min read

Choosing a location

Compare geography, service rules and the complete prepaid price before selecting a VPS location.

4 min read

Security

Hardening, keys, firewalls and access.

SSH hardening

An sshd configuration that resists everything short of a targeted attacker: Ed25519 keys, modern ciphers only, fail2ban, TOTP and hardware tokens.

10 min read

SSH over Tor

Reach your server through a v3 onion service so it never sees the address you administer from, then firewall public SSH off the internet entirely.

7 min read

Networking

IPv6, rDNS, firewalls and DDoS.

Firewall configuration

Deny inbound by default and open only the ports you serve, in ufw, firewalld or nftables directly — plus how not to lock yourself out doing it.

9 min read

IPv6 configuration

Every server ships with an IPv6 /64. How to configure it in netplan and systemd-networkd, bind the whole range, set PTR records and not break ICMPv6.

6 min read

Reverse DNS and mail deliverability

PTR, SPF, DKIM and DMARC are the four records that decide whether your mail arrives. How to set each one, verify it, and warm a new IP without being filtered.

8 min read

Choosing DDoS protection

Understand the standard and advanced catalogue options, application protection and information to send support during an incident.

4 min read

Operations

Backups, snapshots, resizing and migration.

Off-site backups with Restic

Encrypted, deduplicated backups to a storage VPS in a different jurisdiction, in about twenty minutes — including the restore test almost everybody skips.

9 min read