Tutorials & guides

All articles

• Harden a Linux VPS in 30 minutes — Updates, key-based SSH, fail2ban and firewall — a practical checklist.
• Deploy your first VPS in 60 seconds — Account, instance and SSH/RDP access on dash.1vps.cc.
• SSH keys: 2026 best practices — Ed25519, ssh-agent, password disable and rotation.
• VPS backups: the 3-2-1 rule — Three copies, two media, one off-site — Linux and game servers.
• nftables firewall: beginner guide — Allow SSH, HTTP/HTTPS and game ports — then deny the rest.
• Deploy a site with Nginx on a VPS — DNS, vhost, Certbot HTTPS and light hardening.
• Free migration from another host — Sites, databases and game servers: assisted cutover, minimal downtime.
• Monitor CPU, RAM and disk on a VPS — Essential commands and alert thresholds to catch outages early.
• Host a Minecraft server on 1VPS — Java, Bedrock or proxy: RAM, panel and community security.
• Optimize a Rust game server (players, lag, wipe) — RAM, Oxide/uMod plugins and wipe hygiene for a stable server.
• Host a Discord bot on a VPS — Node/Python, systemd/PM2 and token hygiene on a small VPS.
• Install Docker on a Debian/Ubuntu VPS — Official repo, docker group, Compose and security pitfalls.
• Web stack with Docker Compose (Nginx + app + DB) — Internal networks, volumes, env vars and reverse proxy.
• Free HTTPS with Certbot and Nginx — Obtain, install and renew Let’s Encrypt without stress.
• Protect SSH with fail2ban — sshd jail, ban time and lockout pitfalls.
• Configure UFW on Ubuntu/Debian — Deny-incoming policy and enabling without lockout.
• Add a swap file on a Linux VPS — OOM safety net without replacing real RAM.
• Install PostgreSQL on a VPS — Local auth, memory tuning and pg_dump.
• Install MariaDB/MySQL on a VPS — Secure install, app users and tested dumps.
• Traefik reverse proxy with Docker — Compose labels, Let’s Encrypt and internal networks.
• Deploy Nextcloud on a 1VPS instance — Docker Compose, HTTPS, storage and backups.
• Install a WireGuard VPN on a VPS — wg0 server, clients and leak-free DNS.
• Pi-hole on a VPS: filtered DNS for your lab — Sensible lists — never open DNS to the world.
• VPS metrics with Prometheus node_exporter — System exporter, scrape and disk/CPU alerts.
• Grafana dashboards to monitor a VPS — Prometheus datasource and secured admin access.
• Automated backups with restic — Encrypted repo, daily cron and retention.
• Migrate server files with rsync — Safe flags, dry-run and DNS cutover.
• systemd timers instead of cron — .timer units, journald logs and retries.
• Optimize Paper/Purpur on Minecraft Java — JVM flags, view-distance and lean plugins.
• FiveM server with txAdmin on 1VPS — Artifacts, ESX/QBCore resources and sizing.
• Install a dedicated CS2 server — SteamCMD, ports, tickrate and plugin hygiene.
• Velocity proxy for a Minecraft network — Lobby, modern forwarding and private backends.
• Install Redis as an application cache — Local bind, password, maxmemory and eviction.
• Node.js in production with PM2 — Process manager, logs, reload and reverse proxy.
• Python API with Gunicorn and Nginx — Workers, Unix socket and TLS reverse proxy.
• Simple Git deploy with hooks on a VPS — Bare repo, post-receive and controlled builds.
• SFTP chroot for limited users — internal-sftp jail, permissions and sharing without shell.
• Automatic security updates — unattended-upgrades, controlled reboots and blacklists.
• Enable and test IPv6 on a VPS — AAAA, dual-stack firewall and pitfalls.
• Self-host Vaultwarden (Bitwarden compatible) — Mandatory HTTPS, 2FA and vault backups.
• Jellyfin on a VPS: media and transcoding — Storage, RAM and realistic CPU transcode.
• Syncthing for file sync between machines — Secured GUI and VPS as always-on node.
• Caddy: automatic HTTPS reverse proxy — Simple Caddyfile and built-in renewal.
• Deduplicated backups with Borg — Remote repo, encryption and automated prune.
• Harden sshd_config without locking yourself out — AllowUsers, retries and progressive tests.
• Pterodactyl/Jexactyl panel basics — Eggs, allocations, backups and 2FA.
• Mastering logs: journald and logrotate — Avoid a full disk caused by Nginx or game logs.
• Secure RDP on a Windows VPS — NLA, dedicated accounts, firewall and VPN preferred.
• Deploy n8n to automate workflows — Docker, webhooks, secrets and execution queue.
• Self-hosted Matomo for leaner analytics — GA alternative: cookies, retention and anonymization.
• Headscale: self-hosted WireGuard coordination — Self-hosted control plane for a private lab.
• Firewall ports cheat sheet for game servers — Minecraft, Rust, FiveM, CS2: open only what is required.
• Isolate services with Docker networks — Front/back networks, no exposed DB, least privilege.
• CrowdSec: bouncer and basic scenarios — Community-powered complement to fail2ban.
• Deploy Ghost (blog) on a VPS — MySQL, TLS proxy and themes.
• Uptime Kuma for HTTP/TCP monitoring — Simple checks and Discord/Telegram alerts.
• SSH bastion (jump host) for a small fleet — ProxyJump, keys and logging.