18 tutorials · 36 guides
Set up SSH MFA on Ubuntu 24.04 on Raff with SSH keys, TOTP, PAM, OpenSSH, safe rollback, recovery codes, and end-to-end login verification without lockout.
Install WireGuard VPN on Ubuntu 24.04 on a Raff VM. Configure keys, IPv4 forwarding, NAT, UFW, full-tunnel routing, client access, and verification.
Set up WireGuard VPN on Ubuntu 24.04 for private access to a Raff VM. Generate keys, configure a client peer, open UDP 51820, and verify the tunnel.
Deploy Vaultwarden on a Raff Ubuntu 24.04 VM. Covers Docker Compose, Caddy automatic HTTPS, signup lock-down, backups, and end-to-end security checks.
Learn how to install Caddy on Ubuntu 24.04 and configure it as a reverse proxy with automatic HTTPS. Step-by-step tutorial for self-hosting apps on a Raff VM.
Learn how to connect two Raff VMs using a private VPC network. Covers network creation, VM attachment, UFW rules, and bandwidth testing with iperf3.
Learn how to restrict users to SFTP-only access on Ubuntu 24.04 using OpenSSH chroot jails. Covers group setup, directory permissions, and sshd_config.
Automate server backups on a Raff Ubuntu 24.04 VM. Covers backup scripts, cron scheduling, rsync off-server sync, retention, monitoring, and restore testing.
Install Caddy web server on a Raff Ubuntu 24.04 VM with automatic HTTPS. This tutorial covers installation, site configuration, automatic Let's Encrypt certificates, reverse proxy setup, and comparison with Nginx.
Install MariaDB 10.11 on Ubuntu 24.04, secure root access, create an app database and user, verify CRUD, and protect port 3306.
Install and configure fail2ban on a Raff Ubuntu 24.04 VM. This step-by-step tutorial covers SSH jail setup, custom ban rules, log monitoring, and integration with UFW.
Install Redis on Ubuntu 24.04, enable authentication, test cache operations, configure persistence and eviction, and secure port 6379.
Set up SSH keys on Ubuntu 24.04 with Ed25519, ssh-copy-id, ssh-agent, safe password disabling, OpenSSH drop-ins, troubleshooting, and key rotation.
Install MySQL 8.0 on Ubuntu 24.04, keep root on auth_socket, create an app database and user, verify CRUD, and secure port 3306.
Secure Nginx on Ubuntu 24.04 with Let's Encrypt and Certbot. Verify DNS, enable HTTPS redirects, test renewal, and add HSTS safely.
Build a remote development VM with code-server and Tailscale on Ubuntu 24.04. Create a secure browser IDE on a Raff VM without exposing it publicly.
Harden an Ubuntu 24.04 server with SSH keys, safe OpenSSH drop-ins, UFW, automatic security updates, service auditing, Fail2Ban, and recovery planning.
Set up UFW on Ubuntu 24.04 without losing SSH access. Configure IPv4 and IPv6 rules, web ports, source restrictions, logging, and Docker caveats.
Learn Kubernetes NetworkPolicy design for small teams: default deny, namespace isolation, ingress, egress, DNS, rollout checks, and Raff VPC context.
Understand public vs private networking, NAT, DNS, firewalls, admin access, and service boundaries for safer cloud application architectures and VPC design.
Understand private cloud networking for MSP client isolation, including per-client VPCs, management access, shared services, CIDR planning, incidents, and offboarding.
Understand secure remote access for MSPs using bastions, VPNs, zero trust, client isolation, identity lifecycle, logging, recovery access, and Raff VPC.
Understand user access review for cloud servers, covering SSH keys, admins, RDP, service accounts, offboarding, privileges, network exposure, and recovery access.
Understand private vs public admin access for SSH, RDP, databases, and cloud servers, including exposure, MFA, break-glass access, and Raff VPC design.
Understand n8n self-hosted automation, when self-hosting makes sense, and how to plan security, backups, scaling, private access, and recovery for production.
Learn Kubernetes multi-tenancy for MSPs: compare shared clusters, isolated worker pools, and dedicated clusters for security, cost, and client boundaries.
Learn cloud access management for small teams: define IAM roles, least privilege, human and machine identities, access reviews, and practical Raff controls.
Learn VPC architecture for multi-VM apps: plan private traffic, CIDR ranges, routing, firewalls, load balancing, DNS, NAT, and recovery on Raff.
Learn cloud networking fundamentals across VPCs, routing, NAT, DNS, firewalls, load balancing, peering, VPNs, and production traffic boundaries.
Learn Linux commands for cloud servers with a task-based reference for SSH, files, services, logs, networking, security, monitoring, and troubleshooting.
Learn cloud VM patch management for maintenance windows, emergency fixes, deferrals, verification, and rollback planning on production servers.
Learn how small teams use Raff API keys safely for infrastructure automation, CI/CD workflows, inventory checks, backups, and repeatable cloud operations.
Learn S3 bucket security for credentials, policies, private access, presigned URLs, logging, recovery, and S3-compatible object storage boundaries.
Compare shared and per-client Kubernetes clusters for MSPs across isolation, admin access, upgrades, blast radius, cost allocation, operations, and service tiers.
Use this production VPS checklist to validate SaaS capacity, access, traffic paths, storage, backups, monitoring, restore testing, and scaling decisions before launch.
Learn developer supply chain security risks, from dependencies and CI/CD secrets to cloud server access, with a practical protection framework.
Use this stale infrastructure and server decommissioning checklist to remove old servers, forgotten keys, abandoned services, DNS, storage, and data safely.
Understand API rate limiting with a decision framework for fair usage, abuse prevention, endpoint protection, 429 responses, and real-user experience.
Compare application logs and audit logs, including event fields, integrity, retention, sensitive-data controls, storage, incident response, and customer-facing audit history.
Learn DDoS protection for small teams with a risk framework for exposure, traffic layers, response planning, recovery, and cloud server controls.
Build a small-team incident response plan covering triage, evidence, containment, recovery, communication, validation, and post-incident review.
Understand when small teams should use Windows VPS hosting for RDP, business software, IIS, MSSQL, and remote access, with sizing and licensing guidance.
Understand inbound and outbound firewall rules, the least privilege principle, and how to design a firewall policy for your Raff cloud infrastructure. A practical decision framework for sysadmins and DevOps teams.
Use this SaaS infrastructure checklist to prepare access, environments, secrets, backups, monitoring, incident response, and evidence before enterprise onboarding.
Compare GitHub-hosted vs self-hosted runners across security, cost, private networking, autoscaling, ephemeral execution, and operational control.
Compare Podman vs Docker across rootless security, Compose compatibility, systemd integration, networking, storage, and migration risk.
Compare public SSH, bastion hosts, and VPN access models for cloud servers, private networks, databases, Windows RDP, and small-team infrastructure.
Use this VPS setup checklist after deployment to configure updates, SSH access, firewall rules, monitoring, backups, DNS, and recovery in the right order.
Compare IPv4, IPv6, and dual-stack networking for cloud servers, including DNS, firewalls, application binding, monitoring, and migration planning.
Compare environment variables, vaults, and managed secret stores for cloud apps. Learn when each fits, how to rotate secrets, reduce exposure, and avoid secret sprawl.
Compare cloud-init, custom images, and one-click apps for VM provisioning. Learn when to use each model and how to combine them safely.
Self-hosting means running applications on servers you control instead of a vendor's SaaS. Learn when it makes sense, what to operate, and what server you need.
Learn cloud firewall best practices for inbound, outbound, administrative, private, IPv4, and IPv6 traffic without overexposing services.
Learn the cloud security fundamentals small teams need across identity, network exposure, server hardening, secrets, recovery, monitoring, and incident response.
The tutorials, guides, and comparisons we publish, rounded up in one weekly email. Unsubscribe anytime.
Spin up a Linux or Windows server and follow any tutorial here on real infrastructure. RDP and SSH ready, 14-day money-back guarantee.
Deploy a server