17 tutorials · 30 guides
Deploy Vaultwarden on a Raff Ubuntu 24.04 VM. Covers Docker Compose, Caddy automatic HTTPS, signup lock-down, backups, and end-to-end security checks.
Set up a WireGuard VPN server on a Raff Ubuntu 24.04 VM. Create a VM, generate keys safely, import a client config, and verify the tunnel.
Learn how to install Caddy on Ubuntu 24.04 and configure it as a reverse proxy with automatic HTTPS. Step-by-step tutorial for self-hosting apps on a Raff VM.
Learn how to add MFA to SSH on Ubuntu 24.04 using libpam-google-authenticator and TOTP. Covers PAM config, KbdInteractiveAuthentication, and multi-user rollout.
Learn how to connect two Raff VMs using a private VPC network. Covers network creation, VM attachment, UFW rules, and bandwidth testing with iperf3.
Learn how to restrict users to SFTP-only access on Ubuntu 24.04 using OpenSSH chroot jails. Covers group setup, directory permissions, and sshd_config.
Automate server backups on a Raff Ubuntu 24.04 VM. Covers backup scripts, cron scheduling, rsync off-server sync, retention, monitoring, and restore testing.
Install Caddy web server on a Raff Ubuntu 24.04 VM with automatic HTTPS. This tutorial covers installation, site configuration, automatic Let's Encrypt certificates, reverse proxy setup, and comparison with Nginx.
Install and secure MariaDB on a Raff Ubuntu 24.04 VM. This tutorial covers installation, security hardening, user and database creation, basic SQL operations, and optional remote access configuration.
Install and configure fail2ban on a Raff Ubuntu 24.04 VM. This step-by-step tutorial covers SSH jail setup, custom ban rules, log monitoring, and integration with UFW.
Install and configure WireGuard VPN on a Raff Ubuntu 24.04 VM. This step-by-step tutorial covers server setup, client configuration, key generation, and secure tunneling.
Set up SSH key authentication on a Raff Ubuntu 24.04 VM. This step-by-step tutorial covers key generation, copying the public key, disabling password login, and troubleshooting.
Install MySQL 8.0 on a Raff Ubuntu 24.04 VM with this step-by-step tutorial. Covers installation, security hardening, user creation, remote access, and basic database operations.
Secure your Nginx web server with a free Let's Encrypt SSL certificate on Ubuntu 24.04. This step-by-step tutorial covers Certbot installation, certificate issuance, auto-renewal, and TLS hardening.
Build a remote development VM with code-server and Tailscale on Ubuntu 24.04. Create a secure browser IDE on a Raff VM without exposing it publicly.
Secure your Raff Ubuntu 24.04 server with SSH key authentication, UFW firewall, Fail2Ban, and automatic updates. Essential initial setup for production.
Secure your Ubuntu 24.04 VM with UFW firewall. This step-by-step guide covers setting default policies, configuring SSH rules, rate limiting, port management, and enabling logging for enhanced cloud server security.
Learn developer supply chain security risks, from dependencies and CI/CD secrets to cloud server access, with a practical protection framework.
Learn stale infrastructure risk with a framework for old servers, forgotten keys, abandoned services, unused ports, orphaned disks, and ownership reviews.
Understand API rate limiting with a decision framework for fair usage, abuse prevention, endpoint protection, 429 responses, and real-user experience.
Learn cloud access reviews for small teams with a framework for SSH keys, admin users, RDP access, API keys, permissions, and offboarding.
Understand application logs vs audit logs with a decision framework for debugging, security, compliance, retention, storage, and developer workflows.
Learn DDoS protection for small teams with a risk framework for exposure, traffic layers, response planning, recovery, and cloud server controls.
Learn server incident response for small teams with a triage framework for severity, containment, recovery, communication, and post-incident review.
Learn cloud VM patch management with a risk matrix for maintenance windows, emergency fixes, deferrals, and rollback planning for production server teams.
Understand when small teams should use Windows VPS hosting for RDP, business software, IIS, MSSQL, and remote access, with sizing and licensing guidance.
Learn how Restic, Borg, and Rsync compare for cloud server backups. Understand encryption, deduplication, restore speed, retention, and Raff storage options.
Understand private vs public admin access methods including SSH, VPN, bastion hosts, and Tailscale. Learn how to secure server access on Raff.
Understand inbound and outbound firewall rules, the least privilege principle, and how to design a firewall policy for your Raff cloud infrastructure. A practical decision framework for sysadmins and DevOps teams.
Learn secure remote access for MSPs by comparing bastion hosts, VPNs, and zero-trust models. Choose the right admin access design for auditability and client trust.
Learn shared cluster vs per-client cluster models for MSPs by comparing isolation, cost, and operational overhead. Choose the right Kubernetes model.
Learn private cloud networking for MSPs and how to segment client environments, reduce lateral risk, and build safer multi-tenant cloud operations.
Learn MSP backup and disaster recovery strategy by comparing retention, testing, and recovery planning. Build a client-ready data protection baseline.
Learn how MSPs should design multi-tenant Kubernetes environments with namespaces, RBAC, quotas, network policies, node isolation, cost allocation, and client-aware cluster models.
Learn the startup infrastructure checklist to lock down before your first enterprise customer. Cover access, backups, secrets, staging, and monitoring.
Learn GitHub Actions vs self-hosted runners by comparing cost, security, and control. Choose the right CI runner model for your team and infrastructure.
Compare bastion hosts, VPNs, and public SSH for cloud server access, with decision guidance for small teams, developers, SMBs, and production workloads.
Learn what to do after provisioning your first cloud server. A practical post-deployment checklist covering login, updates, users, firewall, monitoring, and first deployment.
Learn the Linux commands you actually use on a cloud server. Organized by real tasks — connecting, securing, deploying, monitoring, and troubleshooting — with examples tested on Ubuntu 24.04.
Learn secrets management for cloud apps by comparing env vars, Vaults, and managed stores. Choose the right approach for scale, security, and team maturity.
Learn when to use a reverse proxy vs load balancer for cloud apps. Compare roles, trade-offs, and best practices to design a safer, scalable architecture.
Understand the difference between cloud snapshots and backups. Learn RPO, RTO, retention policies, and how to combine both for reliable data protection on Raff.
Learn cloud server backup strategy with RPO, RTO, snapshots, and restore planning. Build a reliable backup system for your Raff infrastructure.
Learn when to use public vs private traffic in cloud infrastructure. Understand isolation, latency, security, and networking design patterns for Raff workloads.
Learn cloud firewall best practices for safer servers, including deny-by-default rules, SSH limits, private networking, logging, and review habits.
Learn cloud server backup strategies for snapshots, RPO, RTO, retention, and recovery testing so your workloads can recover after failures.
Learn cloud security fundamentals for developers, small teams, and SMBs, including identity, SSH, firewalls, patching, backups, monitoring, and recovery.
The tutorials, guides, and comparisons we publish, rounded up in one weekly email. Unsubscribe anytime.
Spin up a Linux or Windows server and follow any tutorial here on real infrastructure. RDP and SSH ready, 14-day money-back guarantee.
Deploy a server