Blog & Guides
Deploy. Learn. Grow.
Practical guides to configure your VPS, deploy your applications and master your infrastructure.
All articles
554 articles
Move client domains to DMARC p=reject, in stages
Take each client domain from p=none to p=reject without losing mail: sender inventory from rua reports, alignment, subdomains, a rollout calendar and a client message.
Bricksforge CVE-2026-85097: update and audit your WordPress fleet
Bricksforge 3.1.8.10 fixes CVE-2026-85097, an exploited unauthenticated upload. wp-cli inventory, dropped PHP files, access logs, secrets to rotate.
Fragnesia CVE-2026-46300: patch the Linux kernel (PHP2Shell)
Fragnesia (CVE-2026-46300), chained with PHP2Shell, leads to root. Fixed kernels by distribution, esp4/esp6/rxrpc workaround, checks and traces.
Testing a client backup restore: an agency procedure
A quarterly procedure to restore a client site on a disposable VPS, measure the actual RTO and RPO, and hand the client a dated restore test log.
Isolate AI Coding Agents on a VPS: Booby-Trapped AGENTS.md
A booby-trapped AGENTS.md or CLAUDE.md can steer your coding agent. Unprivileged user, filtered egress, no production secrets: the commands.
Monthly client VPS security audit: a 45-minute checklist
Seven checks to run every month on a client VPS: updates, kernel, SSH accounts, ports, certificates, backups, logs. Includes a dated one-page report.
2027 end-of-life calendar: PHP, PostgreSQL, Node.js, Ubuntu
Dated calendar from November 2026 to end of 2027: PostgreSQL 14, PHP 8.2, Node.js 22, Ubuntu 22.04. Sources, actions and a method to group work by client.
Exim and Dovecot: check that your package is truly patched
Exim 4.97 can be patched while the upstream fix is 4.100.1. Read the package changelog, test your exposure, restart the daemon, and check the logs.
GitLab CVE-2026-110264: update your self-managed instance
GitLab CVE-2026-110264 (CVSS 10.0): fixed version per branch, backup, Omnibus or Docker upgrade, then a check for traces of compromise.
PwnEscape and Vghost: update the Linux kernel on your VPS
Two Linux kernel flaws from October 2026: PwnEscape is fixed by your host, Vghost on your VPS. Check the kernel, update it and schedule the reboot.
PgBouncer 1.26.1: fix CVE-2026-107350 (SCRAM bypass)
PgBouncer 1.26.1 fixes CVE-2026-107350, a SCRAM authentication bypass. Check your version, port 6432 exposure, apt and Docker upgrades, workarounds and log review.
Jenkins on a VPS: your open-source CI/CD server with Docker
Install Jenkins LTS on a VPS with Docker Compose: Jenkinsfile pipelines, Git webhooks, HTTPS behind nginx and build agents isolated from the controller.