ZFS settings you can't change later
Which ZFS settings you can't change later on a VPS: ashift, vdev layout and creation only properties, how to read them back, and what a rebuild costs.
Step-by-step guides to running a Linux server. Exact commands in the order you run them, including the errors you will hit on the way.
Which ZFS settings you can't change later on a VPS: ashift, vdev layout and creation only properties, how to read them back, and what a rebuild costs.
Your zfs destroy fails with dataset is busy or dependent clones. Find the hold, release the tag, use deferred destroy, and promote a clone safely.
Ubuntu's own tools run on /usr/bin/python3, so never replace it. Run a newer Python beside it with uv, the deadsnakes PPA or Docker. Here is which to pick.
n8n is a workflow automation tool you run on your own server. What it is, how it is pronounced, what a workflow looks like, and when to use it.
Claude Code is Anthropic's terminal coding agent. What it does, where it runs, what a plan costs, and why it is not a chat window or an IDE.
A VPS is one physical server sliced by a hypervisor into private machines, usually with their own kernel and root login. What that gets you, and where it stops.
A port is how a server sorts incoming traffic to the right service. Learn to read what is listening with ss, and tell a local port from a public one.
A GPU on a VPS buys batch throughput and room for large models. Quantized chat models, embeddings and Whisper small run fine on CPU. Start there, measure.
When a Toronto VPS is worth it: Canadian data residency limits, real latency to the GTA and northeast US, TorIX peering, and when to host somewhere else.
Only one reason forces a Canadian server, and it is not latency. What PIPEDA really requires, and how to measure the round trip from where your users are.
VDS and VPS usually mean the same thing. Learn where the terms came from, and run four commands that show whether you bought a KVM machine or a container.
Ubuntu Pro explained for one rented server: what ESM actually extends, and how to check from the command line where your own box already stands.
Ubuntu kernels are moving to a weekly release. Learn how SRU pockets work, how to spot a pending reboot, when to reboot, and what Livepatch covers until then.
Tura claims 77.5% fewer tokens than Codex CLI. Here is how the harness gets there, and how to check that claim against your own provider bill.
Classify support tickets on your own VPS with an Ollama decision model: one /v1/systemone call answers every question at once, no API key.
systemd targets replaced runlevels, and systemd 258 removed even the numbered aliases. See what a target is, and how to change what your VPS boots into.
A systemd service keeps your program running: start on boot, restart on crash, log to the journal. How to write one, add a timer, and harden it.
Requires, Wants, After, Before, ExecStartPre and the Condition family do different jobs. What each one promises, and how to debug a unit that never runs.
Build a self-hosted stock research agent on a VPS: a market data feed, a DuckDB store, a systemd timer that fires at market close, and an LLM screen.
Superlog turns OTLP traces, logs and metrics into incidents an agent triages. Run the self-hosted stack on your own VPS, and know the real footprint first.
Run OpenTag on a VPS so Slack and GitHub mentions reach your coding agent: TLS ingress, webhook signature checks, token scopes, and safe defaults.
The real footprint before you start: ClickHouse, Postgres, Valkey, 4 GB RAM, 25 GB free and four DNS records. Then the install, and what fills the disk.
OneCLI hands every person a sandboxed agent and keeps the keys in one gateway. Self-host it on a VPS: Docker Compose, PostgreSQL, and real sizing numbers.
Headless Chrome is the biggest process on a small VPS. Install Moli, serve CDP on loopback, point an agent at it, and learn where it stops working.
LiveContext CE is a seven container Docker stack with a Java backend that wants 8 GB. Size it, pin the version, put Traefik in front, and back up both stores.
LinkSift has no login and binds to localhost on purpose. Run it in Docker Compose, then put it behind Caddy with real auth or on a Tailscale node.
Run HRConvert2 on your own VPS so client files never touch a free converter site. Docker or Apache install, bubblewrap sandboxing, upload limits and cleanup.
Your AGENTS.md is wrong three weeks later and the agent trusts it. Use dox to regenerate the file from the repo, then review the diff like code.
Deer Workflow puts agent orchestration in reviewable TypeScript. Install it on a VPS with Bun, pin the version, and run one graph headless under systemd.
Install Agentlas OS v1.2.0 on a Linux VPS: the pinned install, where state lives, how to point it at Ollama, and what an idle agent hub really costs.
Run the agent-console hub on a VPS so a laptop and every agent box report Claude Code and Codex token use to one place, reached over an SSH tunnel.
Find which base tools on your Ubuntu server are Rust rewrites, which package installed them, and what that changes for your shell scripts and cron jobs.
OpenCode is the most starred open source coding agent. Install it on a VPS, run it in tmux as an unprivileged user, and keep its API key locked down.
OpenClaw runs shell commands and browses the web, so a careless setup is dangerous. Harden it on a VPS: unprivileged user, firewall, secrets, systemd.
Ollama on a small no-GPU VPS with cloud models doing the inference: signin without a browser, a private API on 11434, quotas, and a local fallback.
Move data off an LVM physical volume with pvmove, then vgreduce and pvremove before you detach the disk, in the order that keeps a mounted filesystem alive.
A process vanished with no error of its own. Find the OOM kill in dmesg and journalctl -k, and read the disk and network messages a guest kernel sends.
Pull US daily market data into SQLite on your VPS with a free API key: read the schema, send one SQL query, handle quota errors, and run it on a systemd timer.
Install Portainer CE on a Docker VPS, turn an existing compose file into a Stack, and handle the socket mount, the 9443 certificate and UI drift.
Size a pgvector HNSW index before you build it: the byte arithmetic, maintenance_work_mem, ef_search, and what to do when it stops fitting in RAM.
Paperclip stops an agent at its monthly cap, but only for spend it can price. What the budget policy enforces, and what a subscription run reports.
Raised num_ctx and Ollama no longer fits? The KV cache grew, not the weights. Set OLLAMA_KV_CACHE_TYPE with flash attention and watch the change in ollama ps.
What Google's Open Knowledge Format is, how its provenance and stale_after fields handle stale and poisoned agent memory, and which OKF tool to pick.
nvidia-smi fails with Driver/library version mismatch when an upgrade replaces the NVIDIA libraries under a loaded kernel module. Diagnose it, then fix it.
The n8n Sustainable Use License in plain words: internal business purposes, consulting for clients, paid hosting, white labelling, and where Embed starts.
Routing coding agents across models throws away the prompt cache that keeps them cheap. When routing pays, when pinning wins, and the arithmetic behind it.
Managed or unmanaged VPS? Price the labour: patching, firewall, backups, monitoring, the 2am reboot. What managed leaves out, plus the middle path.
Managed Postgres or your own VPS: the four jobs that transfer, backups, upgrades, failover and monitoring, and how to work out where the cost crosses over.
SSH config, tmux, Ansible, Uptime Kuma, Zabbix and Webmin, ranked by how many servers you have: what each replaces, setup cost in minutes, the one gotcha.
k3s puts the real Kubernetes API on one VPS. What it costs in RAM, why port 80 collides at install, and when Docker Compose is still the right answer.
A KVM VPS separates you from other customers at the hypervisor. The real risk is your own setup: open services, reused keys, unpatched packages, leaked secrets.
Self-hosting is legal. What stops you is your ISP contract, a blocked port 25, CGNAT, and licences like SSPL and BSL. Here is what each one really blocks.
Receiving mail on your own VPS is easy. Getting it delivered to Gmail is the hard part. What deliverability really demands, and when to relay instead.
Linux is free to download and run on any number of machines. The money goes to four places: subscriptions, support, paid cloud images and the server itself.
Install Cloudron on a fresh Ubuntu VPS: the wildcard DNS record, the setup script, first boot, sizing for 2 to 10 apps, mail, certificates and backups.
Impeccable gives coding agents 24 design commands and a detector that flags AI design habits with no model. Install it pinned, then audit a page and check it.
AllowedIPs is the routing table and the access list at once. Learn cryptokey routing, the Noise handshake and rotation, and every wg0.conf reads clearly.
Pick home or a VPS first, then put a static site live on nginx: server block, DNS record, firewall rule and TLS certificate, and what changes for an app.
Size an LLM for a CPU server without guessing: weights in bytes, KV cache growth with context, runtime overhead, and why fitting is not the same as usable.
What nosuid, nodev and noexec really stop on a Linux VPS, the fstab and bind mount entries for /tmp, /var/tmp, /dev/shm and /home, and what breaks.
Why servers use GPT, what the protective MBR in sector zero is for, how many partitions you get, and how to fix the backup header after a volume resize.
Astra now ranks above Sol, so older guides name the wrong best model. Here is what each GPT-6 tier is for in ChatGPT and what the same models cost in the API.
A container behind Gluetun has no interfaces of its own. Publish its ports on Gluetun, and open only the subnets it must reach outside the tunnel.
An agent proposes an action. A policy service and a person decide it. A sealed executor holds the only credentials. The design that survives prompt injection.
FreeBSD 15 is a serious server operating system: ZFS, jails, pf, and one coherent base system. Here is what it does well and where it fits.
Connect Claude to real US market data in five minutes with a no key MCP server: the four read only tools, and what each client needs to talk to it.
DeepSeek Harness, Claude Code and Omnigent compared on architecture, model coupling, licence and maturity, plus what each one takes to run on a VPS.
What docker compose up decides for each service on every run, and how --wait, --build, --pull and --remove-orphans behave when a script or CI job runs it.
Snapd refreshes on its own schedule and ignores unattended-upgrades. Hold a snap, set a refresh window, read snap changes, and revert a bad revision.
What Claude Pro and Max cost from Vietnam, what a Vietnamese Visa or Mastercard adds in conversion fees, the VAT question, and fixing a declined card.
Claude Pro and Max from Türkiye: the USD list price, the 20% KDV added at checkout, how your card turns it into lira, and when the App Store lira price wins.
Haiku 5.5 costs $0.10 input and $0.50 output per million tokens, but prompts over 100K cost five times more. See what three real jobs cost against Haiku 4.5.
Run Claude Code on Microsoft Foundry from a VPS or CI runner with no browser: API key or service principal auth, model pinning, and the errors the docs list.
Claude Code spend trackers answer different questions. Compare local log parsers against the built-in usage screens and your own OpenTelemetry stack.
ChatGPT shows ads on Free and Go, not on Plus or above. Where ads appear, what advertisers receive, which settings you control, and the cheapest way out.
Caveman shortens what a coding agent writes, and its proxy shrinks what the agent reads. Install it pinned to a release, then measure your own sessions.
When a flat Ansible playbook is enough and when a role earns its directories: the role layout, ansible-galaxy init, role calls, and variable precedence.
An idempotent Ansible playbook that installs Zabbix server on Ubuntu 24.04, a vaulted database password that actually wins, and agents across your inventory.
An unattended agent bills every loop with nobody watching. Hard caps, task budgets, prompt caching, batching, and the usage fields that show the spend.
Two harnesses on one model can bill an order of magnitude apart. The mechanics behind the gap, and how to measure your own agent's token spend.
Tailscale needs no inbound port in most setups. See the outbound ports it uses, why 41641 is not 51820, and the ufw and firewalld rules that help on a VPS.
Lookups ending in SERVFAIL since 11 October 2026? Check whether your resolver trusts root key tag 38696 with the RFC 8509 sentinel test, then fix the anchor.
systemd 260 removed the bridge that started init.d scripts and rc.local at boot. Audit your 26.04 server and convert each script to a native unit first.
Take, list and diff ZFS snapshots, roll back past newer ones, clone a snapshot, promote the clone so the origin can be destroyed, and read the space columns.
A 500GB VPS disk shows 465GB because plans count in powers of ten and Linux counts in powers of two. Check the arithmetic on your own server.
Your VPN is blocked because its handshake is recognisable. What Outline, obfs4 and WebTunnel change about the bytes, and what they cannot hide.
Eight jobs people run over a tailnet: reach home, borrow a VPS exit IP, share or publish one service, and SSH with no open ports. One command each.
Ubuntu 26.10 splits OpenSSH, removes the OpenSSL engine, deprecates Postfix hash maps and moves MySQL to 9.7. What to check on a 26.04 VPS before the next LTS.
Install the Superpowers plugin for Claude Code, learn the brainstorm-to-merge loop it enforces, and measure what subagent mode costs on your Pro or Max plan.
The seo CLI turns a spare VPS into an SEO audit box: a systemd timer runs the crawl, and your agent queries the results over a local MCP server.
Run SandBase Harness v0.3.8 on your own VPS: tagged install, agent YAML, MCP servers, sandbox modes, and pointing the Anthropic SDK at your box.
Paritok compresses the file reads and tool output your coding agent sends. The project claims 74% fewer tokens. Here is the mechanism and the break-even math.
Run open-kritt on a VPS: Docker Compose setup, pinning a release, SSH tunnel to the UI on port 5173, and the provider budget to set before your first scan.
Dormice runs E2B-compatible agent sandboxes on one VPS you own. Install it, execute code in a sandbox, check the isolation, and size the host.
Compartment keeps agent memory encrypted on your own machine, fully offline. What that threat model really covers, and what happens if you lose the key.
Muse Glimmer's Linux tags run from 18GB to 59GB. Work out the RAM and disk a rented VPS needs before you pull, and what CPU only inference costs.
Ollama 0.40 cannot run EmbeddingGemma 2 on a Linux CPU yet. Here is the sentence-transformers setup that does, with task prefixes and 256d vectors in pgvector.
Your agent writes a SPEC you approve and an EVIDENCE report you can rerun yourself. Inside the Old Coder gauntlet: what mutation testing adds over coverage.
Yes, Tailscale Inc. is a Canadian corporation registered in Toronto. But new accounts contract with a US entity, and its control plane runs on AWS.
Debian policy is set by a ranked ballot of about a thousand developers. How a General Resolution is proposed, seconded, counted, and reaches your server.
Gluetun installs a real firewall kill switch inside its own network namespace. What your containers see when the tunnel dies, and how to prove it holds.
FreeBSD 13 lost security support on April 30, 2026. Reach 15.1 through 14.4 with freebsd-update, and keep your ZFS pool bootable at every step.
Which container UIs work when the Docker daemon is rootless: Portainer, Dockge, Lazydocker, Cockpit, Komodo, and the socket path that breaks them.
Your DMARC record has said p=none for two years. Read the reports, fix alignment for every sender, then step to quarantine and reject without losing mail.
Where your bytes sit, whose law can reach them, and what Canadian privacy rules actually require of a VPS. Plus how to verify a location for yourself.
Install the command line tools a coding agent reaches for on a bare Ubuntu VPS, in three tiers, with the reason each one saves tokens and tool calls.
You paid for a higher Claude plan and still hit the same wall. Work through the checks in order: billing timing, account mismatch, org seats, stale CLI login.
Max 5x gets $100 and Max 20x gets $200 a month in Claude API credits, and Team pools up to $500. How to claim them, and why Claude Code is not covered.
Claude for Startups has paused its $1,000 API credits and free Team year for new members. See who qualifies, what remains and what claimed perks are worth.
Agent memories go wrong quietly. Put an expiry on time bound facts, cascade the deletes, review the rest, and read your SQLite store with sqlite3.
Tailscale Funnel accepts only ports 443, 8443 and 10000. Here are the prerequisites, the bandwidth reality, and how to check yours is serving.
OpenAI is adding an invisible textGrain watermark to ChatGPT and Codex text in the EU. See who is covered and why a detection proves less than you might think.
MinIO is now archived and unpatched. Compare SeaweedFS, Garage, RustFS and Ceph for a storage VPS, then move your buckets with rclone and verify every object.
Which US VPS city to pick and when it matters: the coast to coast physics floor, users abroad, a database elsewhere, and how to measure latency yourself.
A Claude session key logs a stranger into your whole account. What they can read and spend, why an API key is safer, and how to make a leaked key stop working.
A coding agent runs on text an attacker can write. Map the real injection surfaces on a server, then rank the defences that actually shrink the damage.
Memmy gives your AI agents one shared memory store. Build it from source on Ubuntu, run the memory service on port 18960, and keep every note local.
What Django and Flask really cost on a 1 to 2 GB VPS: resident memory per gunicorn worker, and how many workers a small box can honestly run.
Install Discourse on a VPS with the official Docker launcher: RAM and swap, a real domain, SMTP, app.yml, the rebuild step, TLS and reverse proxies.
One always-on coding agent runs on 4 GB and 2 vCPU. The builds and language servers it launches are what fill the box, and what makes it hang.
Rocky Linux and AlmaLinux already ship a full metrics stack. Start pmcd, find metrics with pminfo, watch them with pmrep, and cap pmlogger disk use.
Deploy Loomfeed, the agent-friendly Reddit alternative, on a VPS: Docker Compose, Postgres 16 with pgvector, TLS, and honest notes on how new it is.
Every anthropic-ratelimit header the Claude API returns, what retry-after means on a 429, and what the unified 5h and 7d headers Claude Code reads report.
Authelia is a YAML forward-auth portal with 2FA. Authentik is a full identity provider with a UI and Postgres. Here is which one a single VPS needs.
XenForo is licensed software, so the server comes first: the PHP version and extensions, MySQL, writable directories, and the nginx rewrite rule.
Three views of one ruleset on Ubuntu: nft list ruleset, iptables -L -n -v and ufw status. Find shadowed rules with counters and see why Docker skips ufw.
Run Hindsight 0.10.2 on your own VPS with Docker: retain, recall and reflect behind loopback, an external Postgres, and the LLM choice that sets cost.
Jev has no public weights. Build the same typed decisions on your own server with llama.cpp grammars or GLiNER2.5-Decide, and check the confidence.
Firebase Studio shuts down in March 2027 but Firestore stays. Compare PocketBase, Parse, Supabase and Appwrite by what each costs to run on a VPS.
Replicate ZFS datasets to a storage VPS with zfs send and receive: full and incremental streams over SSH, compression, resumable transfers and a systemd timer.
A practical comparison of Linux and Windows Server: cost, footprint, remote management, web stacks, Active Directory, and when each is right.
Every way to turn off Sonarr and Radarr login, what the local address option really means on a VPS, and the three setups that are actually safe.
A VPS is a computer you rent. A VPN is an encrypted tunnel for your traffic. What each one does, what each costs, and how one can host the other.
Omarchy update stops with invalid or corrupted package PGP signature? Refresh archlinux-keyring first, then repair a broken pacman keyring by hand.
Terminal agent, editor assistant or cloud agent? Compare Claude Code, Cursor, Codex and Copilot by how each one works, what they cost, and where a VPS fits.
We run Tor exit relays, so here is the real job: picking an exit-friendly host, exit policy, ContactInfo, reverse DNS, and answering abuse mail.
OpenSSH already negotiates a post-quantum key exchange by default. Check what your Ubuntu box really uses, and learn why host keys are still classical.
ollama pull downloads a model and stops. ollama run downloads it, then opens a chat. Where the files land, why they fill a VPS root disk, how to move them.
Bash globbing explained: how the shell expands wildcards into filenames before a command runs, plus nullglob, dotglob, globstar and extglob negation.
Traccar, OwnTracks, Dawarich or Home Assistant: pick the self-hosted location tracker that fits, and keep the ingest endpoint off the open internet.
An AI agent is a loop around a language model that can use tools. Learn the concepts behind building one on your own VPS: the loop, tools, MCP, memory.
Claude bills you in the currency offered in your region. To switch, cancel at the end of the term and resubscribe. Web, iOS, Google Play and API rules.
Host the UniFi Network Application on a VPS: RAM sizing, Docker with MongoDB, Layer 3 adoption with set-inform, and the ports to keep private.
Register a self-hosted GitHub Actions runner on Ubuntu 24.04: dedicated user, checksum, config.sh, a systemd service, and the fork pull request risk.
Your unit says active but the daemon is gone. Pick the right systemd Type= for simple, exec, forking, oneshot and notify, and find the real main PID.
Ansible check mode explained: what --check and --diff really prove, and where a dry run gives you a wrong answer before you apply for real.
Sun built ZFS and DTrace inside Solaris, then opened the source. Oracle closed it again. The illumos fork is why you can still run both today.
Find the Nextcloud data directory inside the container, the host path behind the volume, and everything else a restorable backup needs beyond user files.
num_predict caps how many tokens Ollama will write. The three places to set it, which one wins, and how to read done_reason in the response.
Hash a file with sha256sum and verify it against a SHA256SUMS file. Then flip one byte and watch the check fail, so you learn what a checksum really proves.
Install Docker Engine on Rocky Linux or AlmaLinux with dnf, then fix what Ubuntu guides skip: podman owning the docker command and SELinux on bind mounts.
A 7B model wants 8 GB of RAM and gives 4 to 10 tokens per second on CPU. Host one on a VPS and call it at 127.0.0.1:11434/v1, with port 11434 kept closed.
Claude Code can run any command your user can. What the skip permissions flag changes, and how to contain the blast radius, from sandbox to disposable VPS.
ENTRYPOINT is what runs and command supplies its arguments. See all four override combinations in Compose, and why setting entrypoint clears CMD.
An agent harness is the program around the model: the loop, the tools, the permissions and the session state. How it differs from a model and a framework.
The real cost of a Proxmox box at home versus a rented VPS: hardware and power math, what each is better at, and the hybrid setup most people run.
What a Claude Code plugin is, where it lives, how to install one, and what it really costs: nothing for the mechanism, tokens for what it puts in context.
Tailscale is WireGuard plus a control plane. What that coordination server buys you, what it costs you, and which of the three belongs on your VPS.
WireGuard wins for almost every self hoster on speed, config size and audit surface. Here is the evidence, and the four cases where OpenVPN still wins.
Your WireGuard handshake works but no host on the home LAN answers. Four settings decide whether a packet reaches 192.168.20.10 and finds its way back.
Linux kernel 7.2 adds cache aware scheduling. What CONFIG_SCHED_CACHE changes about task placement, and whether a VPS guest sees any of the gain.
Twenty things people really run on a VPS, from websites and VPNs to photo storage, game servers and AI agents, with honest RAM needs for each.
Run WireGuard behind the wg-easy web UI with Docker Compose: the ports, NET_ADMIN, the sysctls that matter, and QR code onboarding for phones.
Your host says NVMe. Check it from inside the guest with lsblk, sysfs, nvme-cli and a bounded fio latency run, and learn why virtio hides the disk.
Point a coding agent at a model you host: the base URL, the dummy key, the context length that breaks everything, and the jobs a local model wins.
Your terminal sets a TERM name the server has never heard of, so curses programs fail. Fix it with a terminfo entry in your home directory, no root.
Ubuntu Server 24.04 ships unattended-upgrades, but 20auto-upgrades turns it on. Automatic-Reboot stays false, and a dry run shows what it would install.
Tailscale over a DERP relay is slow, direct is close to line rate. Two commands tell you which you have, plus the blocked UDP and hard NAT fixes for a VPS.
Turn your VPS into a Tailscale exit node: install, advertise, enable IP forwarding, approve the route in the admin console, then fix DNS and IPv6.
Read systemctl status before anything else. What 203/EXEC and 226/NAMESPACE mean, and why a unit can start cleanly and exit one second later.
A storage VPS trades NVMe speed and CPU for cheap terabytes. See which spec lines separate it from a standard VPS, and which workload each one fits.
What Stalwart's single Rust binary replaces in a Postfix and Dovecot stack, what it cannot fix, and when a mailcow install is still the better call.
Your ssh client warns that the connection is not using a post-quantum key exchange. Find which algorithm you negotiate, and fix the right side.
The bandwidth math that decides your box size, plus Jitsi, BigBlueButton and Galène compared on RAM, open UDP ports and what breaks behind NAT.
AppFlowy, Outline, Docmost, BookStack and Obsidian compared on the axes that actually decide it: databases, collaboration, mobile and hosting weight.
Deploy Planka on a VPS with Docker Compose: Postgres, Traefik, the admin bootstrap variables, and the BASE_URL setting that breaks your logins.
Run the Outline VPN server, not the wiki app, on your own VPS. Install, access keys, the management API port, and what Shadowsocks does not hide.
Run the mem0 memory server on your own VPS: the real RAM floor, a Compose file that binds to localhost, TLS in front of the API, and a fully local Ollama path.
Run an MCP email server on your VPS so Claude can triage your inbox. App password scoping, sender allowlists, draft-only replies, and the injection risk.
Run KiroCrew as a pinned container on your own VPS so memory and schedules survive reboots. Docker, systemd, SSH access, backups and rollback.
Run Hister on a VPS to search the full text of pages you visited and files you keep: binary and Docker installs, TLS, a login, and the MCP endpoint.
Run ERPNext on your own VPS with Docker: sizing, the eleven container stack, TLS, outbound email, version pinning, and a restore you have tested.
Deploy Chatwoot on a VPS with Docker Compose and Traefik: pinned tags, SMTP that actually sends, Postgres and uploads backups, and safe upgrades.
Run AFFiNE on one VPS with Docker Compose: the four containers, pinned image tags, where your data lives, backups, and what 2 GB of RAM really buys.
The Ollama server ships with no authentication, so anything that reaches port 11434 can run your models and pull new ones. The three fixes, in order.
Your 24.04 to 26.04 upgrade stopped: reattach the screen session, repair dpkg, fix half-flipped sources, and know when to restore the snapshot instead.
Reasoning effort sets how long a local model thinks before it answers. What the levels change on your own hardware, and how to measure the real cost.
A fresh Ubuntu server blocks pip install with externally-managed-environment. Choose venv, pipx or uv by what you install, then point systemd at it.
llama.cpp now cuts v0.x tags beside its bNNNN build tags. Pin one, record it with the GGUF and quant, and treat every upgrade as a drill you can undo.
Omnigent drives the agent CLIs you already have installed. What a meta-harness is, how to pin release 0.7.0, and how to sandbox each sub-agent on a VPS.
A dnf update leaves the old kernel and old libraries running on Rocky and Alma. Use needs-restarting to see what needs a reboot and what needs a restart.
Run MinIO on one Ubuntu 24.04 VPS for an S3 API you own: a verified source build, systemd unit, mc basics, presigned URLs, and a restic backup target.
Run Model Context Protocol servers on your own VPS so AI agents get real tools: stdio and remote HTTP transports, systemd, TLS, auth, and every failure mode.
A capped process can still stall your whole VPS. Set MemoryHigh, MemoryMax, CPUQuota and TasksMax on a systemd unit, and read the OOM kill after.
An agent holding your API keys can leak them in one tool call. Give it scoped short lived tokens behind a credential gateway, never the real keys.
Tailscale is a WireGuard VPN between your own devices. Websites see your real IP until you add an exit node, and your ISP always does. What each setup hides.
Supabase has a real free plan: 500 MB of database and a project that pauses after a week idle. Compare it with self-hosting the stack on your own VPS.
SearXNG swaps your IP for your server's IP at the search engines. Who really sees your queries on a public instance and on your own VPS, and where it stops.
The Nextcloud server is free software with no licence fee. Here is what an Enterprise subscription really buys, and the costs you pay either way.
Work out whether to pay for Claude Pro from how you actually use Claude: how often the free limit stops you, and where Max or the API fits instead.
Yes, on Pro, Max, Team and Enterprise, and no on the free plan. See what shares your usage window, and when an API key quietly bills you instead.
Ubuntu Server offers two kernel tracks, GA and HWE. See which one your VPS runs today, and whether the newer track is worth the extra reboots.
A 1995 password sniffing attack in Helsinki produced SSH. Here is the verified timeline from telnet and rlogin to OpenSSH and post-quantum defaults.
Graft parses your repo with tree-sitter into a codebase map your coding agent queries over MCP, so it stops rediscovering the same structure every session.
nvidia-smi cannot talk to the driver. Walk the ladder: lsmod, dmesg, dkms status, then fix missing headers, nouveau, a kernel update or Secure Boot.
Installing a dsh plugin runs someone else's code with your agent's permissions. What a plugin can reach, and how to check one before you install it.
Your VPS disk is full and Docker is holding it. Find which of images, containers, build cache or volumes has the space, then prune it without losing data.
How Docker Compose healthchecks are evaluated, why depends_on alone waits for nothing useful, and how to write readiness checks for Postgres and your app.
Debian ships unattended-upgrades switched off. Enable it properly, read Origins-Pattern, check the apt-daily timers, and prove it patches itself.
Running Postgres, MySQL, MongoDB or Redis in a container is fine in production. The risks are volumes, upgrades, backups and memory limits.
Steal time is the CPU your VPS was ready to use and never got. Learn to read the vmstat st column and to tell a noisy neighbour from your own overload.
Colemak, Dvorak or QWERTY: what each layout optimises, where the typing speed evidence is weak, and what a switch costs on machines you do not own.
What runs natively on Linux today: the beta desktop app from apt, the Claude Code CLI, editor plugins, and which paid plan covers each one.
Connect Claude to n8n on your own VPS: an integration guide with credentials, model choice per node, three worked AI workflows, cost math, and common errors.
One Claude Code session can send text to another on the same VPS. What ListAgents and SendMessage do, when a second session helps, and why messages get held.
A cloud session runs Claude Code in the cloud, on Anthropic's machines by default. See which balance it uses, what the credits are, and when they run out.
Issue a wildcard certificate with Certbot using the DNS challenge. How the TXT record proof works, which plugin to install, and how renewal stays automatic.
Claude's weights are not public, so no server of yours can run it. Here is what you can self-host instead: open models, a gateway, and Claude Code.
Mostly no. The clock resets Claude's limits, plus an occasional free limit reset on eligible plans. What new chats, logouts, upgrades and credits change.
Your SearXNG instance can be the search backend for an AI agent. JSON API setup, the trust boundaries, and the prompt injection surface it opens.
ARM VPS plans usually cost less per core. The compatibility checks that decide whether your stack runs on arm64, and the commands that prove it.
Create a private CA with openssl, sign a leaf certificate, then install the root in /usr/local/share/ca-certificates so Ubuntu trusts your internal HTTPS.
Build a working AI agent in n8n: the AI Agent node, a Claude model credential, an HTTP Request tool, memory, a trigger, and the settings that cap cost.
Open source projects disagree on AI-assisted code. Find the project's policy before you open the pull request, and disclose it in the commit trailer.
Install Flarum on a VPS with PHP, Composer and MariaDB, serve only /public over TLS, and fix the mail and extension upgrade traps that break new forums.
Agent Zero runs code, a browser, and a shell from a Web UI, so exposing it carelessly is dangerous. Set it up on a VPS and lock the Web UI down.
nginx returns 403 and the permissions look fine. Read the SELinux denial, fix the label with semanage and restorecon, and leave enforcing on.
Build a dsh plugin from an empty folder: the package.json fields that matter, the patch file that mounts it, a real tool, and the two hooks you need.
Perplexity open sourced Numbat, an endpoint monitor that records what AI coding agents really do on your servers. What it sees, and what it cannot stop.
Run Codex, Claude Code and Hermes behind one self-hosted API. The exact Docker deploy, the loopback bind, the default login you must change, and TLS access.
Where dsh keeps its config on Linux, how to wire a DeepSeek API key or a local Ollama endpoint, and exactly what leaves your box in each mode.
What Nextcloud is genuinely bad at on a VPS: many small files, the sync client on large trees, unconfigured cron, and the memory floor for office.
Centralize Linux logins so one change reaches every server. Compare a directory with SSSD, an SSH certificate authority, and Ansible-managed keys.
Draco, Hound and self-hosted Firecrawl compared on RAM, headless browser needs and API compatibility, with a pinned install and an MCP wire-up.
Claude Pro from Italy in 2026: the dollar price, what it converts to in euro, the 22% IVA added at checkout, the App Store price, and how to get a fattura.
Move a CentOS Stream 8 or 9 server to Rocky Linux with migrate2rocky: the README warnings, snapshot first, what distro-sync keeps, and the checks after.
Install the tor daemon on a VPS, then send one process or one container through its local SOCKS proxy. Know what that hides and what it does not.
Paperclip is the control plane over your AI coding agents. Install it on a VPS, then reach the UI over SSH or a tailnet instead of the public internet.
On most VPS plans the disk is virtual and SMART never reaches the guest. Here is what you can really monitor, and how to alert before writes fail.
Get a Claude API key, secure it on Ubuntu 24.04, ship a Python log-explainer with streaming, typed error handling, and real cost control.
Four kinds of traffic leave a coding agent, and only one is unavoidable. Audit any agent from the machine itself, then cut the traffic you did not agree to.
Renting a GPU by the hour beats per-token API billing only above a certain volume. Here is the formula and the monthly token count where it flips.
Change a Linux server's timezone with timedatectl on Ubuntu 24.04 and Rocky 9, see the one symlink it rewrites, and why cron and Docker may ignore it.
Run NVIDIA Nemotron 3.5 Lightning with Ollama on your own server: the exact tag to pull, how much RAM it needs, and if CPU-only is fast enough.
Read dnf updateinfo on Rocky or AlmaLinux, list only the security advisories, apply one advisory or one CVE fix, and know when the patch needs a reboot.
OpenClaw is a personal AI agent that runs commands on your own server. Here is how one is built, piece by piece, and why hardening comes first.
Anthropic gives qualifying open source maintainers six months of Claude Max 20x. See the current eligibility routes and the billing catch at month six.
How npm supply-chain attacks reach a Node app on a VPS: malicious patch releases, postinstall scripts, typosquats, and the deploy practice that stops them.
Recall is a fully local plugin that logs each Claude Code session and condenses it into a resumable summary. Set it up on a VPS and measure the saving.
GLM 5.2 is cloud only in Ollama's library. Here is the GLM model that actually fits a VPS, and the RAM each quantisation needs on your own box.
Shared hosting or a VPS? The real split is root access and who fixes the server when it breaks. When shared hosting still wins, and the four signs to move.
Run five apps behind one IP with Traefik v3 on Docker Compose: routing by Host rule, automatic Let's Encrypt TLS, and the acme.json trap that blocks issuance.
Your app and your index sit on the same VPS, so latency is not the problem. Compare pgvector, Qdrant, Chroma and brute force, and size the RAM correctly.
A server in Brazil is worth the premium for some workloads and wasted on others. Here is what the distance costs your users, and how to measure it yourself.
One root AGENTS.md in a monorepo goes stale and burns context on directories the agent never opens. Here is the nested layout that fixes it.
chown sets which user and group own a file on Linux. Create the account first, use chown user:group and chown -R, and fix root owned files after sudo.
import_playbook, import_tasks and include_tasks do different jobs. See which one your site.yml needs, and prove it with ansible-playbook --list-tasks.
Open SearXNG to other people safely: bind to localhost, get X-Forwarded-For and trusted_proxies to agree, enable the limiter, and lock down the JSON API.
A kernel upgrade made the NVIDIA DKMS build fail. The log DKMS leaves under /var/lib/dkms names the real cause. Here is how to read it and fix it.
Temperature does not make a model smarter. Here is what it does to the token distribution in Ollama, plus top_p, top_k, min_p, seed, and which place wins.
Four different failures look like n8n going offline. Learn to tell the websocket banner, a restart loop, an out of memory kill and a dead schedule apart.
Cache writes cost 1.25x and reads 0.1x or less, so a Claude prefix pays back on its second use. Derive your own break-even, then prove it from the API.
The VPS you rent is a direct descendant of 1960s time-sharing. Trace the line through CTSS, Multics, Unix, IBM VM/370, Xen and KVM, and what never changed.
Zapier and Make bill per task. Self-hosted n8n bills a flat server cost. Work a real month of volume, find the crossover, and read the n8n license.
GRUB_DEFAULT=1 on Ubuntu names a submenu, not your old kernel. Read the menu entries your server has, then pin the next boot without risking a rescue console.
Cal.com, Easy!Appointments, Rallly and DayOtter on your own VPS, compared on the two things that decide it: two-way calendar sync and outbound email.
Which self-hosted helpdesk fits: FreeScout, osTicket, Zammad, GLPI or iTop, and how mail to ticket, agent count and SLAs decide it for you.
Run log management on one VPS: journald and logrotate first, then Loki or OpenSearch, with the RAM floors and retention rules that decide it.
A snapshot lives on your provider's infrastructure, so it is not a backup. What each one restores, and what to fix on a cloned VPS before it runs.
Loop engineering means designing the trigger, boundary, verification and budget an AI agent repeats, instead of writing one clever prompt. A plain definition.
On an ordinary VPS the host can read your guest memory. What AMD SEV-SNP and Intel TDX change, what attestation proves, and how to check the server you have.
Set up a guard or middle Tor relay on a Linux VPS: torrc, bandwidth accounting that protects a metered plan, nyx monitoring, and the slow consensus ramp.
Run the sandboxd AI app builder on your own VPS: pinned install, model keys, HTTPS preview URLs, RAM and disk floors, and cleaning up stale sandboxes.
Why so much network capacity landed in the New York and New Jersey metro, when an East Coast VPS beats a central US one, and how to measure it.
On Ubuntu 24.04 a plain apt install already bans SSH brute force. The fail2ban-client status sshd output proves it, plus the fix when Total failed stays at 0.
Which message queue belongs on a single server: delivery guarantees, memory and disk cost, restart behaviour, backlog checks, and when Postgres wins.
SQLite is the right production database for most small apps on one VPS. WAL mode, busy_timeout, Litestream replication, and the limits that break it.
Broken packages in apt can mean two faults. Learn to tell an unconfigured .deb from a resolver refusal, then find the real blocker before you blame a hold.
Run Apache as a reverse proxy on Ubuntu, then read a backend log to see what ProxyPreserveHost, X-Forwarded-For and X-Forwarded-Proto really deliver.
Every thread in a Claude Code project is a full cloud session on your plan limits. See what burns usage fastest and which settings slow it down.
The second request waits, or it is refused: what OLLAMA_NUM_PARALLEL and OLLAMA_MAX_QUEUE really control, and why every parallel slot costs you memory.
Ollama Cloud and a self-hosted Ollama share one CLI and one API. See exactly which settings change, and what leaves your machine on each path.
Zanus AI's no-code AI server is sold by quote only. What the same private stack takes to build on a rented GPU server, and when an API is the better buy.
Five reasons a cron job seems dead: a minimal PATH, an unescaped percent sign, the wrong crontab, output lost to mail, and a script that assumes your shell.
Output tokens cost five times input, and every turn re-reads your whole context. See the arithmetic on one real session, and the four levers that cut it.
Your instruction file says stop and the agent does it anyway. The mechanics behind that, and a diagnosis you can run before you rewrite the rule again.
Ubuntu, Debian, Rocky, AlmaLinux, CentOS Stream or Fedora: choose by support lifetime, package age, RHEL compatibility and whose docs you follow.
Linux kernel 7.1 shipped on 14 June 2026. Here is what reaches a VPS tenant, how to check the kernel you run now, and when 7.1 arrives on your distro.
Kimi K3 is 2.8 trillion parameters. Here is the VRAM arithmetic, the KV cache math, and the three honest ways to run it without a 32 GPU cluster.
SSH is an encrypted channel to a remote server. Learn the client and server model, port 22, host key fingerprints, and key versus password login.
HTTP explained for people who run servers: methods, status codes, the headers that matter, what nginx logs, and where HTTP/3 and TLS fit in.
An agent skill is a folder with a SKILL.md file whose instructions load only when a task needs them. Why that beats a giant prompt, and how it differs from MCP.
Install Webmin on Ubuntu 24.04, then lock it down: SSH tunnel or IP allowlist, a real Let's Encrypt cert, two-factor, and Fail2ban on port 10000.
Recover a headless server that fails to boot after a kernel upgrade: provider console, GRUB previous kernel, initramfs and LVM failures, and prevention.
A VM is the technology, a VPS is that VM sold as a product, and a VPC is a private network in the cloud. Here is what each word implies, and which you need.
Who should put a VPS in Frankfurt: DE-CIX peering, real latency numbers for German and EU users, and what hosting in the EU does and does not do for GDPR.
What a game server VPS really needs: fast single core speed and enough RAM. Sizing, ports, systemd restarts, backups, and why latency is about location.
Run Uptime Kuma in Docker to monitor websites, ports, DNS and cron jobs, alert via email or Telegram, and publish a status page from a separate VPS.
There is no direct jump. Upgrade 22.04 to 24.04, verify and snapshot, then take the 26.04 hop. Covers the PPA, PHP, Python, database and netplan breaks.
Six checks that tell you whether do-release-upgrade to Ubuntu 26.04 is safe on your VPS, or whether a fresh server and a migration is the better call.
The umask clears bits from the mode of each new file. Print it, create a file and a directory, read the modes back, and see why root and your user differ.
Traefik v3 will not start with swarmMode or pilot in static config. Fix the incompatible deprecated install configuration option error, then migrate rules.
Open source apps that keep OIDC and SAML in a paid tier: why maintainers price it that way, and the checklist to run before you install anything.
Set the Tailscale operator user once, then run serve and funnel from a deploy account without sudo. What the setting changes, and what still needs root.
Reach a home NAS, Pi or Minecraft server without opening a router port. How Tailscale gets through NAT, when it falls back to a relay, and what it cannot do.
Restart= watches only the main process, so a dead child inside the same cgroup is invisible. How Type=, restart limits and the journal really work.
Two SSH errors, opposite causes. Refused means the server answered. Timed out means nothing answered at all. Learn which test to run, and from where.
Run your own URL shortener on a VPS with Shlink and Docker Compose: short domain DNS, Postgres, API keys, the web client, QR codes and click stats.
Planka, Vikunja, Focalboard, Wekan and Kanboard compared on RAM floor, database, SSO, Trello import and which of them are still maintained.
Mattermost, Rocket.Chat, Synapse and Zulip compared on RAM, database, mobile push, SSO, upgrades and licence, using each vendor's own sizing figures.
Which self-hosted secrets manager belongs on one VPS: OpenBao, Infisical, SOPS with age, systemd credentials, or a locked down env file, and what each costs.
Miniflux, FreshRSS, CommaFeed, yarr and Tiny Tiny RSS on a VPS: memory budgets, database needs, Fever and Google Reader API support, and upgrade behaviour.
Activepieces, Windmill, Node-RED, Automatisch and Huginn measured against n8n on licence, RAM, database, AI steps and the backup that breaks restores.
Discourse, Flarum, NodeBB and phpBB on a VPS: the RAM each really needs, the database it drags along, the spam story, and the migration path out.
Sentry self-hosted wants 16 GB RAM. GlitchTip runs in 512 MB. Compare RAM, disk growth, container count and upgrade pain before you pick one.
Nextcloud, Seafile, Syncthing and object storage compared: sync topology, what each really costs on a small VPS, and why sync is not backup.
draw.io, Excalidraw and Kroki on your own VPS: which parts never touch your server, and why that decides whether self-hosting buys you privacy.
Sync calendars across phone and laptop without Google. Set up a CalDAV server on your VPS with Radicale, TLS, discovery and client setup that works.
Which self-hosted budgeting apps pull bank transactions automatically, which need manual import, and how Actual, Firefly III, Fava and Wallos compare.
Run your own SimpleX SMP relay on a VPS: pinned install, the fingerprint clients need, ports, an unprivileged service user, backups, TLS, and its threat model.
Deploy openGym on a VPS with Docker Compose: a pinned git tag, TLS before the first passkey, where the data lives, and the read-only MCP server.
Self-host OpenBot so each AI coworker gets its own container and browser. How the gateway decides every action, and what that costs you in RAM.
Run LinkBreeze on a VPS with Docker Compose and Caddy: pinned image tags, cookieless click tracking, and the one volume that holds your whole site.
Run Langfuse on your own VPS: the real resource floor, pinned image tags, TLS, ClickHouse retention before it fills the disk, and backups that work.
Catch every test email on a throwaway domain with Mailpit, read it in a web UI, and stop your staging app from ever mailing a real customer again.
Fifteen containers, 4 GiB of RAM minimum. Change the default passwords in .env before first boot, then claim the admin account at /install before anyone else.
Readarr retired in 2025. Chaptarr is the fork that runs audiobooks and ebooks in one instance: a Compose service, PUID and PGID, and the metadata break.
The first hour on a Rocky Linux or AlmaLinux VPS: dnf updates, a wheel user, key only SSH, firewalld, dnf-automatic, and SELinux left enforcing.
Send SearXNG outgoing engine requests through a proxy or Tor: the outgoing settings.yml block, per-engine networks, timeouts, and when it makes results worse.
Seafile splits files into blocks for fast sync. Nextcloud keeps files on disk and runs apps. Compare sync speed, RAM, backups and encryption.
Build llama-server from a pinned tag, serve GGUF models on the OpenAI-compatible API, bind it to localhost, and run it under systemd with memory limits.
Run dsh, the DeepSeek Harness, as a systemd service on a VPS: dedicated user, pinned version, Restart rules, journalctl logs, and an SSH tunnel to the UI.
Run Aider or Goose on a VPS to code from your terminal, connected to a hosted or a self-hosted Ollama model. Setup, model sizing, and safety.
Install FXServer on Ubuntu, pin an artifact build, add your Cfx.re licence key, open 30120 on TCP and UDP, and keep txAdmin off the public internet.
Put a container behind a Gluetun sidecar and its ports vanish. Here is why the shared network namespace does that, and the compose file that works.
RHEL is a paid subscription with vendor support. Rocky Linux rebuilds the same code at no cost. What compatible really means, and which belongs on your VPS.
Rocky Linux and AlmaLinux both rebuild Red Hat Enterprise Linux. What differs is the compatibility promise, and whether older CPUs are still supported.
Run a real graphical desktop on your VPS with xrdp and XFCE, tunnel it over SSH instead of opening port 3389, and see where RustDesk fits instead.
Two clones sharing one /etc/machine-id can fight over a DHCP lease. Regenerate it safely, and truncate it before you snapshot a golden image.
You ran rm -rf on the wrong path. Stop writing to that disk now, then work through the recovery options that actually exist on ext4, in order.
Run Proxmox Backup Server on a VPS as an offsite target: datastore setup, namespaces per host, prune and garbage collection, encryption keys, restore tests.
Forward auth puts an app that has no login behind your OIDC provider. Wire oauth2-proxy into nginx or Traefik, and avoid the cookie and redirect traps.
Every Postgres connection is a process with its own memory, so a 4 GB VPS runs out of RAM long before max_connections. What a pooler fixes, and what it breaks.
GLIBC_2.34 not found means the build host set the version floor. Read what a binary really demands, then pick one of four ways to ship it portably.
Run paperless-ngx on a VPS with Docker Compose: the official Postgres stack, PAPERLESS_URL, the consume folder, OCR languages, HTTPS, and backups.
Open WebUI, LibreChat, Hollama and OrionChat compared on a VPS with a public IP: RAM left for the model, logins, remote Ollama, and upkeep.
Put sshd behind a Tor onion service so the VPS answers on no inbound port. Setup, v3 client authorisation, and the exact order that avoids a lockout.
Ollama is a convenience layer for one user, on CPU if needed. vLLM is a throughput engine for GPUs. Pick by workload, with the real commands for both.
llama.cpp is the engine, Ollama is the layer on top. Which one to run on a CPU-only VPS, how quantisation choice changes RAM, and when neither fits.
Three services, one VPS, one public IP. How Nginx, Caddy and Traefik differ on certificates, config cost per app, websockets and Docker routing.
Most VPS hosts hide the vmx flag. Check yours with kvm-ok in one minute, then run KVM or Proxmox guests, with the exact error strings you will see.
Lock an admin panel behind mTLS: build a private CA with openssl, issue client certificates, and configure nginx to refuse anyone without one.
Run a Paper Minecraft server on an Ubuntu 24.04 VPS: RAM sizing, Java 25, a systemd unit, firewalls on 25565, safe world backups, and the exact errors.
What MiMo-Code actually is: Xiaomi's MIT-licensed terminal coding agent, forked from OpenCode. Read the self-reported benchmark claims before you switch.
Build a full LAMP stack on Ubuntu 24.04: Apache, MariaDB with unix_socket auth, PHP 8.3 with PHP-FPM, a name-based vhost, and free HTTPS via Certbot.
Three self-hosted SSO servers, one small VPS. The RAM floor each one really needs, which handles apps that speak no SSO, and where each one loses.
When SSH drops, the kernel sends SIGHUP and your job dies. Use nohup, disown, tmux or systemd-run to keep it alive, and know which one fits the job.
No Claude plan is unlimited. Every plan has a 5-hour session limit and paid plans add a weekly cap. Here are the options, from waiting to API billing.
Cowork ships with every paid Claude plan and no free one, and it spends the same usage budget as chat and Claude Code. Checked 11 October 2026.
Incus gives you a container with its own init, users and services. Set one up on a VPS: virtualisation checks, storage pools, networking, and what breaks.
Image mode for servers: the system ships as one image, and rollback is a reboot. What bootc, Fedora CoreOS, Flatcar and Talos cost you on a VPS.
What an Immich backup must contain, why a live copy of the Postgres data directory is not a backup, and the restore mistake that leaves a timeline empty.
VPS prices run from about $3 to over $100 a month for specs that read the same. Here is what drives the gap, and what to compare before you buy.
How Unix became Linux: Bell Labs in 1969, AT&T licensing, Berkeley BSD, the 1992 lawsuit, and why the server room went to Linux instead of BSD.
Tor began as onion routing research inside a US Navy lab in 1995. Here are the dated milestones, and a straight answer on who funds the network.
How Red Hat Linux split into Fedora and RHEL, why CentOS existed, what the 2020 CentOS Stream change broke, and where Rocky Linux and AlmaLinux came from.
From the Homebrew Computer Club to the SSPL: how the GPL, the 1998 rebrand and today's relicensing wave shaped the apps you self-host today.
Kermit turns 45 and just shipped a new release. The story of file transfer, from noisy phone lines to FTP behind NAT, and why rsync and SFTP won.
Headless Chromium on a VPS breaks in known ways: tiny /dev/shm, sandbox flags, missing fonts, leaked processes. Set the limits before your agent hits them.
Halcyon rebuilds your Jellyfin library as a walkable 1990s rental store in the browser. The Docker command, the reverse proxy, and the honest caveats.
Why the GPL, MIT and Apache 2.0 exist, what each one asks of you, and what the SSPL and BUSL relicensing wave means if you self-host the software.
Why dnf cannot find your package on Rocky Linux and AlmaLinux: what BaseOS, AppStream and CRB hold, how to add EPEL safely, and how to keep repos clean.
Nested virtualization in Proxmox VE 9: check kvm_intel or kvm_amd, set nested=1 in modprobe.d, give the VM a host CPU, verify in the guest, or turn it off.
PUID and PGID are not Docker settings. They are an entrypoint convention in linuxserver.io images. Why bind mount files land as 911:911, and how to fix it.
Docker publishes container ports with iptables rules that skip UFW, so a denied port still answers the internet. See the mechanism and the fixes that work.
The default project bridge, DNS by service name, when host mode is worth it, sharing one network across projects, and the published port that skips UFW.
Open a shell in a running Compose service with docker compose exec, and use run --rm for a service that is stopped or must not be disturbed.
Anthropic publishes no memory token price. Remembered text is replayed as input tokens, so your cost tracks how much you replay and whether it is cached.
The dnf command for every apt command you already know, on Rocky Linux, AlmaLinux and Fedora, plus the repository and rollback parts that do not map.
WP-Cron only fires when someone loads a page, so it stalls on quiet sites and piles up on busy ones. Move it to system cron with WP-CLI, and verify it ran.
Compare DigitalOcean alternatives on price per GB of RAM, included transfer, NVMe storage and backup costs, with a cutover plan that avoids downtime.
Free cPanel alternatives for a VPS: Virtualmin, ISPConfig, CyberPanel, HestiaCP, CloudPanel and Froxlor, with install commands and the migration traps.
Colemak Mod-DH moves D and H out of the centre columns to easier index finger keys. What changes, who should switch, and how to enable colemak_dh on Linux.
Yes. Codex CLI signs in with your ChatGPT Plus or Pro plan and no API key. Here is what the plan covers, and why the unofficial bridge tools keep breaking.
Cockpit or Webmin on your Ubuntu VPS: what each panel can change, how each logs you in, why neither belongs on a public port, and when to use neither.
Cloudron vs CasaOS vs Coolify on a VPS: install commands, TLS, backups, cost, and resource overhead compared, so you pick the right self-hosting panel.
Only one vendor publishes an Enterprise seat price. Compare seat minimums, SSO and SCIM, audit logs, retention terms and metered agent usage.
Point Claude Code at Amazon Bedrock or Google Vertex AI: the environment variables, where credentials come from, who gets billed, and what you give up.
Claude Code runs in tmux on a VPS and your phone is only the window. SSH keys, mosh for flaky mobile data, tmux attach, and the keyboard fixes that matter.
Claude Code adds a Co-authored-by trailer to commits, and cloud sessions add a claude.ai link. Read what is there, then control it before you push.
Auto mode is now the Claude Code default in terminal and VS Code sessions. What each permission mode does, and which one a server you cannot watch deserves.
List every known CVE affecting the packages on your Debian or Ubuntu VPS with debsecan and debvulns, then alert only on the ones that are worth a reboot.
See what is really listening with ss, then test the port from outside with nc or nmap. Learn why a blocked port hangs while a closed one refuses at once.
Change a VPS root or user password on Ubuntu with passwd, chpasswd and chage, verify it works, and get back in when SSH or the root password is lost.
Moving sshd to a new port on Rocky Linux or AlmaLinux needs firewalld, an SELinux port label and sshd_config. Do it in the order that keeps you logged in.
Two readers, two answers. A standard VPS cannot play games for you, and here is the reason. Hosting a dedicated game server on one works well.
Use Claude as the brain and your VPS as the body. How the Messages API, tool use, and MCP fit together to build an AI agent you run yourself.
Three self-hosted wiki apps compared on setup weight, editing model, login options and search, with a clear pick for solo admins and for teams.
How Canonical's authd logs Ubuntu server users in with Google or Entra ID, what the broker snaps cost you, and the break-glass account to build first.
apt update says a target is configured multiple times. Find the legacy .list and deb822 .sources pair, keep one, and get a clean update run back.
Your Ansible inventory decides which host gets which variable: INI and YAML forms, groups, group_vars, host_vars, connection settings and precedence.
Run Actual Budget on a VPS with Docker Compose: the data volume, why the browser needs HTTPS, your first budget file, bank imports, and backups.
The DSH web UI binds to 127.0.0.1:3080, so the URL your VPS prints will not open on your laptop. Three safe ways to reach it, and one you should avoid.
Install Zabbix 7.0 LTS on Ubuntu 24.04: add the repo, import the MySQL schema, wire up the nginx frontend and agent2, then fix every error the setup throws.
Pick a model by the RAM you actually have. Sizing arithmetic for 4 GB, 16 GB and 64 GB VPS plans, honest CPU token rates, and the hidden cost of context.
CGNAT leaves you with no public IPv4 address. Put frp on a VPS, dial the tunnel out from home, and terminate HTTPS on the public end with a real certificate.
Self-host a Bitwarden-compatible password manager with Vaultwarden and Docker on a VPS: HTTPS-first, admin token, Fail2ban, tested backups.
Copy a live Vaultwarden vault with sqlite3 .backup, keep the attachments, config.json and rsa_key files, then prove the restore works before you need it.
How SSH keys work and how to manage them: one ed25519 key per device, the permissions sshd demands, config Host blocks, and revoking a lost key.
Sonarr and Radarr warn that Allowed Hosts is not configured. Here is what to type in that field for your setup, and how to get back in if you are locked out.
Mint a self-signed TLS cert Chrome actually accepts on Ubuntu 24.04: one openssl command with SAN, nginx/Apache wiring, and trusting it without curl -k.
Run Whisper transcription and Piper text to speech on your own VPS. What it costs in CPU time and disk, and how to expose an OpenAI compatible endpoint.
What open video models really produce in July 2026, the VRAM class each one needs, what a five second clip costs on a rented GPU, and when to use an API.
Deploy Octop on a VPS with Docker Compose pinned to a tag: per-user isolation, an OpenAI-compatible model backend, TLS, and why to skip the curl installer.
What it really takes to keep a Matrix Synapse homeserver alive on a VPS: sizing, Postgres, media retention, registration defences, and backups.
Prefill is compute bound and owns time to first token. Decode is memory bandwidth bound and owns tokens per second. Measure them separately on your own box.
Which office server belongs next to Nextcloud: vendor RAM floors, what the free CODE and Docs builds limit, docx fidelity, and what fits a 2 to 4 GB VPS.
Pick an Ollama quantization with arithmetic instead of guesswork: what q4_K_M, q8_0 and fp16 cost in RAM, and where the quality actually drops.
Nextcloud alternatives sorted by what you keep: file sync only, faster sync with a lighter server, object storage, or plain SFTP. With migration costs.
Give a Jellyfin container an NVIDIA GPU with Docker Compose, turn on NVENC and NVDEC, and prove the GPU is really transcoding with nvidia-smi.
On current Ubuntu the iptables command already writes nftables rules. Prove it on your box, read the native ruleset, and see where ufw and Docker collide.
Immich documents 6 GB of RAM as its minimum. Here is what the server, Postgres, Redis and machine learning each need, and how to run it on 4 GB.
Downloads work but nothing ever connects in. Set up gluetun port forwarding, push the new port to your torrent client on every reconnect, and verify it.
Jails isolate a full FreeBSD userland; Docker ships layered images from a registry. How the two models differ on software, state, networking and limits.
dsh prints http://127.0.0.1:3080 because the Web UI binds to localhost only. Reach it safely with an SSH tunnel, and see why publishing 3080 is unsafe.
Configure dnf-automatic on Rocky Linux and AlmaLinux: security-only mode, the systemd timer, email alerts, and a reboot policy that avoids surprises.
Neither API wins every workload. Learn the token arithmetic once, then read three costed jobs and see exactly where the Claude bill runs higher.
The Claude API has no free tier. New accounts get a small signup credit, and several parts cost nothing. October 2026 rates plus a worked cost for a first app.
Run Block's Buzz relay on your own VPS with Docker Compose: Nostr keys, closed membership, Caddy TLS, a pinned image, and what stays hosted by Block.
Test whether your VPS CPU is x86-64-v3, pick the right AlmaLinux 10 build and ELevate flavour, run leapp preupgrade and upgrade, and know what rollback means.
Private DNS is Android's name for DNS over TLS. What it hides from your network, what it does not, and how to run your own resolver on a VPS with Unbound.
Build an eval loop you own: golden cases from real traces, cheap deterministic checks first, an LLM judge second, and a pass rate you track per commit.
Docker on a VPS is the same engine with less room: RAM runs out, published ports skip UFW, containers stay down after a reboot, and disk fills up.
Install FreshRSS on your own Ubuntu VPS with Apache, PHP and MariaDB: the release tarball, virtual host, cron refresh, and the mobile app API.
OpenHands is an AI agent that writes and runs code, so its setup needs care. Install it on a VPS with Docker and lock down the Web UI and its secrets.
Docker Compose deploy guides stop at the login screen. Here is the rest: what to dump, which volumes to capture, how to prove a restore, and how to upgrade.
A three year cost model at 1 TB, 4 TB and five seats: a Dropbox subscription against a storage VPS, offsite backup, a domain and your own hours.
An update broke something on Rocky or AlmaLinux 9. Use dnf history to find the transaction, undo it, and pin the package so it cannot come back.
The Python docker-compose reached end of life. The docker compose plugin did not, and it still ships releases. Here is what your server actually runs.
Install Docker Engine and the Compose plugin on Ubuntu 24.04, write a real two-service compose.yml, dodge the ufw port-publishing trap, and back up volumes.
Bento is an MIT licensed office suite that ships as one HTML file. What that shape buys you on a small VPS, and what it costs against Nextcloud.
Live kernel patching swaps patched functions into the running kernel. What it covers on an unmanaged VPS, and why the reboot is only postponed.
What really separates a shared hypervisor from a whole machine: noisy neighbours, steal time, price steps, and when each one is the cheaper buy.
How compose.override.yaml loads on its own, what file order really merges, the ports trap that keeps a port open, and include for a dev and prod split.
SQLite holds transactional application state. DuckDB answers analytics over Parquet and CSV. Why one VPS usually runs both, with a worked example of each.
A self-hosted n8n reads three timezone settings, so a schedule trigger can fire hours off. Set TZ, GENERIC_TIMEZONE and the workflow zone right.
Podman runs containers with no daemon and rootless by default. What that changes on a rented server: compose files, quadlets, ports and volume ownership.
Run Iva, a self-hosted Telegram AI assistant, on a small VPS: no open ports, no domain, systemd user services and an Obsidian vault you back up.
KVM, Xen and LXC decide whether your VPS has its own kernel, real swap, working nested virtualisation and honest steal time. Find out which one you bought.
An Obsidian vault is a folder of markdown, so Claude Code can refile and audit notes. Here is the VPS setup and the permission rules that stop bulk rewrites.
Anti-slop is a third-party Agent Skill that filters generic AI output from your coding agent. What the three tiers do, and what the core costs per call.
Team Premium seats and Claude Max cost the same per person on annual billing. What differs is who controls the seat and which terms cover your data.
Anthropic started marking Claude output in August 2026. How the watermark biases token choice, and why a detection result proves less than you think.
Check whether your VPS exposes AES-NI, measure what a masked CPUID costs your AES-GCM throughput, and force the bits back on with OPENSSL_ia32cap.
Locked out by ufw? Get back in through the provider console, disable the firewall, read the rules that actually applied, and stop it happening again.
An attacker submits a victim's address to hundreds of signup forms at once. Confirmed opt in and rate limits stop your server sending one of them.
Your VPS is compromised. Isolate it at the provider firewall, snapshot the disk as evidence, rotate every key it held, then rebuild from a clean image.
A line by line teardown of a cheap VPS listing: vCPU oversell, unlimited bandwidth clauses, NVMe claims, renewal pricing, and a 30 minute acceptance test.
Why $(...) runs in a subshell, so cd and variables vanish, why backticks nest badly, and the process substitution tricks that keep state in your shell.
What a fresh k3s install leaves open on a VPS: port 6443, the kubelet on 10250, kubeconfig mode, NodePorts your firewall never sees, and privileged pods.
Your cloud firewall or handwritten iptables may only cover IPv4, leaving services wide open on IPv6. See why it happens on a VPS and how to close the gap.
Secure Boot refuses unsigned NVIDIA modules, so DKMS builds fine and modprobe still fails. Check firmware state, then enrol a MOK or stop enforcing.
Most cloud images ship with no swap. Here is when a small VPS needs a swap file, how big to make it, what vm.swappiness trades, and when zram wins.
Firecracker needs /dev/kvm, and most VPS plans never pass it through. Check yours in three commands, read the result, and know what to run when it is missing.
Benchmark a VPS properly: yabs.sh first, then fio, sysbench and iperf3 by hand. What the numbers mean, and why a single run tells you almost nothing.
Send mail from self-hosted apps without running a mail server. One SMTP relay at host level, SPF, DKIM and DMARC, and a fix for blocked port 25.
Keep passwords and API tokens in a playbook repo safely: encrypt a vars file or one inline string, split staging from production, and rekey cleanly.
A new VPS is a target from its first minute. This ten-minute runbook creates a user, sets SSH keys, disables root, and turns on the firewall.
Port 10250 is the kubelet API. Fix the address already in use error on kubeadm init, and the firewall drops that break kubectl logs and exec.
Debian 11 bullseye lost LTS security support on 31 August 2026. Confirm your version, then upgrade in two careful hops to Debian 13 before apt stops working.
AI coding agents belong on a machine you can destroy. Blast radius, clean state per task, snapshots, and the VPS pattern that keeps it cheap.
Your VPS disk reads full and a directory walk cannot find the space. Find the deleted file a process still holds open, and the other causes.
Tor and a VPN answer different questions. See exactly who learns what at every hop, and why a VPS rented in your name is not an anonymity tool.
The fable-method repo turns Claude Fable 5's habits into agent skills. What each file does, what ports to other models, and how to A/B it on a VPS.
Run n8n on a VPS with Docker Compose, Postgres, and HTTPS behind a reverse proxy: the WEBHOOK_URL and encryption-key traps, plus every error string.
An interim Ubuntu release gives you nine months and a forced upgrade. An LTS gives you five years. Here is what each costs on a server you run.
How the unlazy skill stops an agent declaring done early: the Depth Tree, gates files, the PLAN.md contract, install steps, and what the depth costs you.
A scrub reads every allocated block and verifies it. On a single device VPS pool it finds damage it cannot repair, so here is how often to run one.
One command gives Apache a free Let's Encrypt cert on Ubuntu 24.04. Skip snap: apt ships Certbot 2.9.0. Plus the ServerName trap that blocks issuance.
Claude Code hooks run whether the model agrees or not. Where they live, which events fire, what exit code 2 does to a tool call, and the security cost.
Set Colemak on the Linux console, in X11 and on Wayland, learn why an SSH server needs no layout, and what happens to Vim's hjkl and Ctrl keys.
Zitadel wants 4 cores and 8GB. Set up Postgres, the masterkey, TLS, SMTP and backups on one VPS, and learn what an upgrade does to your database.
Terraform creates the VPS, Ansible configures it. The real split, why provisioners fight both tools, the handoff commands, and when you need only Ansible.
The Compose commands you reach for every day, grouped by job: lifecycle, applying changes, logs, shells, networks, volumes, and cleanup that is safe.
Set up Redis as a WordPress object cache on your own VPS: bind it to localhost, size maxmemory, pick an eviction policy, and verify the cache is real.
Run Claude Code on an always-on Linux VPS inside tmux so agent sessions survive a dropped SSH connection. Install, harden, and the failure modes to expect.
Install Ansible with pipx on Ubuntu 24.04, write an inventory and a first playbook that hardens a fresh VPS, plus fixes for Permission denied and sudo errors.
Restic reaches S3 and object storage on its own. Borg wants its binary on the far end and pays that back with speed over SSH. How to pick, with commands.
Matt Pocock's skills repo ships 27 agent skills. Here is which ones a solo developer on a VPS should install, and which only pay off on a team.
Weekly and monthly checks for a Linux server, plus the release upgrades, with the failure each one prevents and the restore test almost everyone skips.
Run Nextcloud on your own VPS with Docker Compose, Postgres, Redis and a TLS reverse proxy, plus the backup and upgrade steps that keep your data recoverable.
WSL and a VPS solve different halves of a dev setup: uptime, a public address, systemd, filesystem speed, backups, and the SSH bridge between them.
One user was fine, five crawl. How batching, KV cache limits, prefill and queue depth decide how many people your LLM server can serve at once.
What SysV init could not do, what Upstart and launchd tried first, why every distribution moved to systemd in four years, and which objections were right.
Run Mealie on your own VPS with Docker Compose. Paste a recipe link and get clean steps, plus meal plans, shopping lists, nginx, TLS and backups.
Run a v3 onion service on Ubuntu with tor and nginx bound to loopback, then close the leaks that link the address back to your public IP.
Shell history is not an audit trail. Compare sudo logging, session recording, shell hooks and auditd execve rules, then ship the logs off the box.
Claude web checkout refuses while your App Store subscription is still inside its paid period or in billing retry. What to check, and how long to wait.
Default ports for Sonarr, Radarr, Prowlarr, Bazarr, qBittorrent, Jellyfin, Seerr and FlareSolverr, plus how to keep every one of them off the public internet.
Why Sonarr and Radarr copy instead of hardlink, the single /data layout that fixes it, the compose volumes to match, and how to prove an import linked.
Argument list too long is the kernel refusing an oversized exec, and the glob you typed is usually why. Reproduce it, then fix it with xargs or find.
Switching models only fixes a model family limit. How Claude subscription session and weekly limits differ from API 429 rate limits, and what to do next.
Claude usage credits mean two balances: extra usage on a Pro or Max plan, and prepaid API credits in the Console. Where each lives and what runs out.
Slow WireGuard is usually an MTU problem. Find your path MTU by bisection, clamp TCP MSS, check steal time, and measure the path before blaming the tunnel.
Bitwarden's standard server wants a dozen containers and 2 GB of RAM. Vaultwarden serves the same API in one. Here is which one belongs on your VPS.
Since 29 September 2026, Ubuntu 24.04 servers are offered the 26.04.1 upgrade. Here is the safe upgrade order, and the server services that break.
A point release is your Ubuntu with every update rolled into new media. Why a patched server downloads nothing, and how 24.04 is now offered 26.04.1.
Run an obfs4 Tor bridge on one cheap VPS: torrc directives, port choice, firewall, the log lines that prove it works, and how users get your bridge.
Advertise a private network to your tailnet from a VPS: route approval, IP forwarding that survives a reboot, and the --accept-routes flag Linux needs.
Tailscale serve puts HTTPS on a tailnet-only URL. Funnel opens that same port to the public internet. Which to use, and the policy gate that blocks funnel.
Tailscale pricing is per user, not per device. See what a household and a five-person team pay, which plan limit you hit first, and when Headscale wins.
Too many authentication failures means your SSH client offered more keys than the server allows and got cut off. Diagnose it with ssh -v and fix it for good.
Sonarr and Radarr ship with no default username or password. Where config.xml lives in Docker, and how to reset a lost login in under a minute.
Run Asterisk or FreePBX on your own VPS: SIP trunks, RTP port ranges, the firewall rules that keep scanners out, and how toll fraud starts.
Four ways to run a self-hosted Git server, ranked by RAM: bare repos over SSH, cgit, Forgejo or Gitea, and GitLab. See what a 1 GB VPS can host.
FileBrowser, Filestash, SFTPGo and Cloud Commander compared on scoping, share links, storage backends and auth, plus how to run one without risking your files.
The honest hardware ladder for running Stable Diffusion yourself: what a CPU VPS can do, what SDXL needs, ComfyUI install commands, and disk you should budget.
Set up WireGuard on your own Linux VPS: key generation, wg0.conf, IP forwarding, NAT, AllowedIPs semantics, DNS, and the handshake failures that bite.
Run the official Supabase Docker stack on a server you own: the secrets you must replace, what the eleven services do, RAM needs, backups, and updates.
Run ntfy on your own VPS behind TLS with Docker Compose. Lock topics with users and ACLs, then alert from cron and systemd OnFailure units.
Run one OpenAI-compatible endpoint in front of every provider you use: LiteLLM on a VPS with virtual keys, per-key budgets, fallbacks, and pinned images.
Test outbound port 25 before installing mailcow: a block strands mail in the queue until it bounces. Then set DNS that stops Gmail's 550 5.7.25 PTR rejection.
SearXNG 429 errors have two causes: your own limiter, or the engines blocking your server IP. Read the log, fix the right one, and stop guessing.
Searx has taken no code commit since 2023 and SearXNG carries the project now. Check the status yourself, then see what changed for a new instance.
Qwen 3.8 27B is now on Ollama as qwen3.8:27b. Here is the RAM and speed arithmetic for running it on a CPU-only VPS, and what fits in 8 to 64 GB.
Your Hermes agent runs on a VPS. Reach it from a phone over a private mesh or a public HTTPS endpoint, and revoke access when the phone goes missing.
Two self-hosted photo servers compared: the real RAM floors, the phone apps, the maps, and the exact backup commands each one needs on a VPS.
Opus 5.5, Sonnet 5.5 or Haiku 5.5? The October 2026 rates per model, a worked cost comparison on 100,000 jobs, and the settings that move a bill most.
Ollama unloads a model after 5 minutes idle, so the next request waits for a reload. Set keep_alive in a systemd override so it survives reboots, then preload.
Run a .gguf from Hugging Face or from a local file under Ollama, and fix the chat template mismatch that makes an imported model reply in garbage.
Ollama truncates long prompts at a small default context. Set num_ctx per request or OLLAMA_CONTEXT_LENGTH server-wide; size KV cache RAM before raising it.
Build an nginx reverse proxy server block line by line: proxy_pass, the four headers your app needs, websockets, trailing slashes, and uploads.
A rented GPU only beats per-token billing above a throughput floor. Measure tokens per second properly with a concurrency sweep, then decide.
Vaultwarden encrypts every vault item in the client, so the server holds no plaintext. The real risks are your admin token and your backup file.
Tailscale never holds the keys that encrypt your traffic. Its safety hinges on what a compromised coordination server or stolen identity account can do.
A Claude Code plan pays for itself in recovered hours. Here is the arithmetic at your own rate, the cases where it fails, and the VPS cost nobody counts.
Claude bills per million tokens, input and output priced separately. Here is the arithmetic that turns a token count into a number on your monthly bill.
Almost every Linux distribution descends from Slackware, Debian or Red Hat. Trace the family tree, the package managers, and what your VPS images inherited.
FTP logs in fine and then the directory listing hangs. The data channel needs its own ports. Here is the passive range to declare, and the firewall rule.
Most Tailscale install errors on Ubuntu are apt errors. Read the status code apt printed, then fix the release codename or the signing keyring.
SSH Permission denied (publickey) has five causes. Read the ssh -v output to find yours, then fix it without locking yourself out of the server.
Ollama context deadline exceeded means a timeout fired before the model answered. Find which layer set it: your client, the model load, or nginx.
Every published DeepSeek Harness build is still a prerelease. Pin an exact dsh version, clear the npx cache, and check which npm you actually run.
Bind mounts and named volumes in Docker Compose: which to use for config and for data, the file permission traps, and how to inspect, back up and migrate.
Set memory and CPU limits in Docker Compose so one greedy container cannot take down your VPS: deploy.resources, mem_limit, exit 137, swap, sizing.
Three different things get called an env file in Docker Compose. See how .env, env_file and environment differ, which one wins, and where secrets belong.
Make Docker Compose services come back after a reboot: restart policies, why on-failure does not survive one, and when a systemd unit is right.
Run Prowlarr, Sonarr, Radarr and qBittorrent from one Docker Compose file on a VPS, with the shared PUID, PGID and volume layout that keeps hardlinks working.
Your Ubuntu server reports no new release found. Work through the Prompt setting, the LTS point release gate, third party repos and held packages.
Install the DeepSeek Harness on a Linux VPS, pin the npm version, understand what a plugin can do, and reach the port 3080 web UI over an SSH tunnel.
Run Cloudflare Tunnel on a VPS: named tunnel, credentials file, ingress rules, systemd service, then close 80 and 443 and bind the app to localhost.
When /boot fills with old linux-image packages, apt installs and upgrades start failing. Find the kernels you can remove safely, and keep the one you booted.
Claude Max and ChatGPT Pro both sell a $200 tier. Compare what usage each buys, whether the coding agent is included, and what happens at a limit.
Claude Enterprise lists a $20 seat price, then meters every token at API rates. What the seat minimums, audit logs and negotiated quote really cover.
Claude Code is priced at 20 USD in the US and in local currency where Anthropic supports it. Here is how region, tax and your card change what you pay.
Yes: Claude Code runs on an Anthropic API key with no Claude subscription; the two bill separately. See which one your session uses, and how to switch.
Metered API billing or a flat plan? Here is the break-even arithmetic on current per-token rates, and what moves it further than the plan fee does.
Four ways to authenticate a Claude API client on a VPS: an Anthropic key, AWS IAM on Bedrock, Google ADC on Vertex, Entra on Foundry, plus safe storage.
Cancel or downgrade a Claude plan without losing the month you paid for: when billing stops, what changes at period end, and when Max to Pro costs nothing.
Run Authentik on Docker Compose for one login across every app you host: the env values that matter, the akadmin bootstrap, and forward auth via Traefik.
Claude Free, Pro, Max 5x and Max 20x beside ChatGPT Free, Go, Plus and Pro at October 2026 prices, plus which one is cheaper for coding work.
A Claude token is a few characters. See why a Claude Code turn can bill 80,000 tokens and why five idle minutes on an API key can make the next turn cost 5x.
Ubuntu 26.04.1 LTS shipped on 27 August 2026. What the point release contains, and how 24.04 servers can upgrade since the path opened on 29 September.
Claude Pro costs $20 a month, or $17 a month billed annually. Here's what it adds over the free plan and when its usage limits cut you off.
Claude Max costs $100 a month for 5x Pro usage or $200 for 20x. Same models and features at both prices. See what the multiplier means and which tier fits you.
Tailscale explained: WireGuard tunnels between your servers, a coordination server for keys and ACLs, NAT traversal, DERP relays, and the threat model.
Free, Pro, Max, Team or Enterprise? Match the 2026 tiers to the way you work: which plans include Claude Code, and when Team beats five Pro accounts.
There is no individual student discount on Claude as of October 2026. Here is the free tier, the university route, and a coursework month costed on the API.
Hit a Claude usage limit? Work out which window you are waiting on, then pick a route: smaller model, smaller context, usage credits, or the API.
What the Claude free plan includes, how its usage limits are counted and reset, why the API has no free tier, and when paying starts to pay off.
Read drwxr-xr-x one character at a time and map it to 755. Learn why x on a directory means traverse, and why chmod 777 is never the right fix.
Datacenter ASNs, hosting flags and shared range reputation explain most VPS blocks. Check how your own IP is classified and what you can legitimately do next.
Put two apps behind Caddy 2.11.7 with automatic HTTPS and a version hold, then fix the 431 errors and dropped headers that recent releases bring.
N: Missing Signed-By means apt trusts a repo through its global keyring. Find the entry, check the key with gpg, and give each source its own Signed-By.
Anthropic trains on your code if a consumer account has model improvement on, or your company opted in. See which terms a session uses and what stays on disk.
Restic sends encrypted, deduplicated backups from your VPS to another server or object storage, on a nightly timer, with a restore drill that proves it.
Your VPS has three clocks and only one matters. Find the drift, read chronyc and timedatectl output, and fix the sync that broke your 2FA login.
Hermes Agent or OpenClaw for a persistent self-hosted agent? Pinned to September 2026 tags and compared on ports, sandboxing, memory, skills and Claude auth.
ZFS gives a server checksummed data, free snapshots, send/receive replication and cheap compression. The ARC also takes your RAM. How to judge that on a VPS.
Ansible treats an unreachable host differently from a failed task. Use ignore_unreachable, serial and max_fail_percentage, and still see what was missed.
Run Ollama as a rootless Podman container on a VPS: a dedicated user, lingering, a Quadlet unit that survives reboot, SELinux labels, and a closed port.
Run Google's Gemini CLI on a headless VPS: a current Node, a no-sudo global install, browserless API-key auth, and tmux so long tasks survive SSH drops.
ProtectSystem, PrivateTmp, DynamicUser and NoNewPrivileges explained: what each directive blocks, what it breaks, and how to debug a unit that stops starting.
Run Rakazo on your own VPS: Node 22, pnpm, Postgres and Graphile Worker in Docker Compose, the sandbox provider choice, key handling, and honest sizing.
Six server jobs Claude does well: reading a failed unit's logs, drafting systemd units, reviewing nginx and Compose files, plus what you must never paste.
A Fedora release gets about 13 months of updates, so a Fedora server needs a version upgrade every year. What that costs, and when Fedora is worth it.
The KV cache is RAM your server pays for on every request. Prompt caching is a bill someone else discounts. Only one can break a model load.
Convert a PDF, EPUB or folder of internal docs into an agent skill your coding agent loads on demand: install, token budget, headless runs, licensing.
Abuse mail about your VPS IP follows a fixed pipeline. Who reports, how the notice reaches you, what each category means, and how to answer in time.
Invoice Ninja, InvoiceShelf, InvoicePlane, Kimai and ERPNext on one VPS: recurring billing, tax, client portal, payment gateways and licence terms.
Self-host Rocket.Chat on a VPS with Docker Compose: the single-node MongoDB replica set it requires, TLS, backups, and every failure mode fixed.
Ubuntu began as a snapshot of Debian unstable in 2004. What 22 years of shared packaging and quiet divergence mean when you pick a server OS.
Hermes needs no GPU: the model runs elsewhere, so a small VPS is plenty. Run it as its own user with ProtectSystem=strict in systemd, and cover IPv6 in UFW.
SearXNG engines answer a VPS with CAPTCHA pages more often than a home connection. Read the real error, then pick a fix that survives a restart.
Cowork runs in an Anthropic sandbox and touches folders you connect. Claude Code runs on your machine or VPS. Where each one fits, checked October 2026.
Run your own Tailscale control server on a VPS. Install headscale from the official .deb, set server_url and restart it, then join your first node.
Ponytail makes a coding agent take the smallest change that works. What it ships, what its own benchmarks show, and how to copy the rule today.
Self-hosted n8n is free under a fair-code licence with real limits. What you may do, which features need a paid key, and where cloud plans fit.
Claude Code on Team and Enterprise: what each seat includes, the seat prices published in August 2026, and when paying per token costs less.
Every turn re-sends your whole context, so a long session slows down and costs more. Read /context, cut the fixed tax, then clear and compact with intent.
The honest RAM number, port 2283 behind HTTPS, the exit 137 memory kill, and why Immich v3 will not start on a pgvecto.rs database. Restore steps included.
Seven levers that cut a Claude bill: annual billing, right sizing the plan, cheaper models, smaller context, prompt caching, batch jobs, and real discounts.
Resume a Claude Code session by name or from the picker, and find the plaintext transcripts it leaves behind on the machine where the agent ran.
Five DeepSeek Harness plugins that change how a rented server behaves: budget caps, tool permission rules, injection scanning, durable memory, LAN access.
Use Claude to analyze stocks and options with delayed market data: a free no-key API, three ways to connect it, and prompts that get grounded answers.
Run Jellyfin in Docker on a VPS to stream your own library: block storage, media permissions, direct play vs CPU transcoding, and safe remote access.
What a Dallas VPS actually gives you: central US latency to both coasts, dense carrier peering, the ERCOT grid question, and when to host elsewhere.
A history of the Linux kernel from 0.01 to 7.x: the GPL switch, the microkernel argument, the birth of git, the LTS model, and what each means for servers.
Copy a skill into eight repos and the copies drift. Treat skills like dependencies: one shared repo, and a version each project pins and reviews.
sudo apt install certbot python3-certbot-nginx, then one certbot --nginx run for a Let's Encrypt cert. Plus apt vs snap and the port 80 renewal timeout.
Run Navidrome on a VPS and stream your own music library to any phone. Storage sizing, Subsonic clients, offline sync, TLS, and safe backups.
Run the NetBird mesh VPN on one VPS: DNS and TLS setup, the pinned quickstart script, setup keys for unattended peers, and how it compares to Headscale.
Team or Enterprise for Claude? Compare seat minimums, billing terms, SSO and SCIM, data controls, and where Claude Code fits, with two worked examples.
What each private search engine does with your query: index source, where it runs, what its privacy page says, and what breaks when you run SearXNG yourself.
The vendor Compose example leaves your app on a public host port. Use a Tailscale sidecar so the container has no published port, only a tailnet name.
The banner means only 10% of your current session allowance is left. See why long chats burn it faster and where Claude shows your reset time.
docker compose down removes containers and the project network; named volumes survive unless you add -v. docker compose stop deletes nothing.
Run RustDesk hbbs and hbbr on your own VPS: the Ed25519 key, pinned image tags, locked down ports, and the relay bandwidth your plan pays for.
Yes: Tailscale's free tier covers up to six users with unlimited user devices. See what a seat, a device and a tagged resource cost, and when Headscale wins.
A curated list of 25 self-hosted apps worth running in 2026, grouped by job, with what each one replaces, honest RAM and disk needs, and the gotcha to know.
This message means Claude used up the tool calls allowed in a single turn. It is separate from your plan quota. Here is how to finish the task.
Your WireGuard tunnel is up but names do not resolve, or the queries leak to the local router. Find which of the three DNS failures you have, and fix it.
Claude Code says invalid API key while you pay for a subscription? Find the stray ANTHROPIC_API_KEY on your VPS, and learn why /login will not fix it.
Claude Fable 5 lists at $10 per million input tokens and $50 per million output. Here is what the published rates mean for the jobs you actually run.
Seat math for a 3 to 15 person team as of October 2026: standard and premium seat prices, when an API key beats a seat, and worked examples at 5 and 12 people.
Claude Code costs $20 a month on Pro, $100 or $200 on Max, or per token with API credits. Prices as of October 2026, with a worked monthly estimate.
Run Qwen3.8-Flash-Next on your own hardware: how much RAM the GGUF files need, where Strata fits, when you need vLLM, and what the licence restricts.
Ubuntu 20.04 lost standard support in May 2025. Attach Ubuntu Pro for patches until 2030, or upgrade through 22.04 to 24.04. Here is how to choose.
Reach across two tailnets with node sharing, user switching, a two-daemon VPS bridge or one tailnet with ACLs. See what each option exposes to the other side.
AGENTS.md tells a coding agent how to work in your repo. DESIGN.md tells it why the code is shaped that way, so it stops undoing your decisions.
Hindsight 0.10.2 against mem0 2.2.1 for agent memory on a VPS: memory model, services you run, LLM cost, MCP, licence and what self-hosting drops.
Claude output tokens cost five times input. Here is why decoding is slower than prefill, and what that asymmetry does to a real agent bill each month.
Which SearXNG engines survive a datacenter IP and which get CAPTCHAs, plus the settings.yml keys (disabled, timeout, weight, suspended_times) that act on it.
What Claude's five effort levels really do, which level is your default, and why max drains your Pro or Max window and can add usage credit charges.
Huntarr exposed every connected arr API key, then its repo was deleted. Remove it, rotate your keys, and replace it with Wanted searches or a guarded fork.
The SearXNG limiter keeps its per IP counters in Valkey. Set up limiter.toml in a container or a source install, and see which sections actually matter.
An output style edits Claude Code's system prompt, so it shapes every reply. What the built-in styles do to your transcript, and how to write your own.
Private DNS mode should be on, set to a hostname you chose. Here is what the toggle does, when it breaks wifi logins or internal names, and how to tell.
Ubuntu 26.04 makes sudo-rs the default sudo. Here is the sudoers delta that matters: wildcard argument rules stop matching, and what to write instead.
Run Sonarr and Radarr behind nginx or Traefik with forward auth: the Allowed Hosts entries that stop Invalid Hostname errors, and why /api must skip login.
OpenClaw, Hermes, Dify, OpenHands, and Agent Zero compared: what each agent does best, what it needs, and how to run any of them safely on your own VPS.
How DNS grew from one shared hosts file into a signed, encrypted global system, and which old design choices still decide how your VPS resolves names.
Add speaker labels to a Whisper transcript on your VPS. Pick between pyannote and NVIDIA Nemotron, get past gated model 401 errors, and time it on your CPU.
Reverse DNS maps your VPS IP back to a name. Learn who sets the PTR record and how to check it with dig. Mail servers distrust an IP without a matching one.
Gemini Free drops to Flash-Lite on 9 October 2026. See what the free Claude, ChatGPT and Gemini plans give you on limits and privacy, and when to pay.
Your Ubuntu login says a new release is available. Learn why 24.04 shows it only now, and how to defer the upgrade while security updates keep running.
Run SearXNG on your own VPS with Docker Compose: settings.yml, the limiter, nginx with TLS, and a JSON search API your own scripts can call.
Your weekly Opus allowance is spent. Sonnet still works. When Opus resets, whether credits or a Max upgrade bring it back early, and what to do in Claude Code.
Register a Microsoft Entra app for self-hosted n8n, fix the callback URL, and plan for the client secret expiry that later breaks your Outlook workflows.
Yes, through Docker Desktop and WSL2. Install the SearXNG container, bind it to localhost, set a secret key, and learn where a Windows PC stops being enough.
Seven AI agent examples people run on a VPS: what starts each one, what it can touch, the model it calls and how much server it needs, from our tested guides.
Dell, HPE, Lenovo and Supermicro build the AI servers most buyers can order. See who else builds them, and every channel from OEM configurator to GPU rental.
Ollama does not browse on its own. Give a local model search through Ollama's web search API, Open WebUI with SearXNG, or a short Python tool loop you control.
Three real Claude Code mods read hook by hook, then a small TypeScript mod that refuses VPS lockout commands, checked with plugin validate and plugin test.
Connect Gmail to self-hosted n8n behind a reverse proxy, then stop the seven-day Google token expiry that kills Gmail workflows a week after setup.
Self-host the Laya decision model on a CPU VPS with laya-serve 0.3.26, keep it off the public internet, and learn why Ollama cannot load it but Ollaya can.
Learn what Ansible facts cost, when gather_facts: false is the right call, and how gather_subset and JSON fact caching cut the wait on every run.
Opus 5.5 costs $4 per million input tokens and $20 output, 20% below Opus 5. See which Claude plans include it and when fast mode is worth double the rate.
A Claude Code mod runs TypeScript inside the agent with your credentials in reach. See what it can touch on a VPS and the checks to run before you install one.
Run Cloudflare's Clef vision decision models in Ollama on your VPS. Moderate uploads and route tickets with screenshots, and the image never leaves the box.
Queue mode puts n8n executions on Redis and lets workers run them. See when one VPS gains from it, then build a pinned Compose stack with Postgres and Redis.
Run Claude Code inside an NVIDIA OpenShell v0.1.2 sandbox on a Docker VPS. Read what the default policy blocks and which attacks it still lets through.
Ollama is MIT licensed and free to run on hardware you own. What costs money is Ollama Cloud and the machine with enough RAM to hold the model.
Both run WireGuard, so the choice is elsewhere: who runs the control plane, how you write access rules, how relays work, and what self-hosting NetBird takes.
Coolify drives servers over SSH while Dokploy runs on Docker Swarm. Learn where each control plane lives on one VPS or three, and how to back it up and leave.
Hold one package, like nginx or MariaDB, at its current version on Rocky Linux 9 and AlmaLinux 9 while dnf-automatic keeps updating everything else.
Yes. Claude Academy courses are free on Skilljar with a completion certificate. The Claude Certification Program is separate: four paid Pearson VUE exams.
Run Orca's coding agents on a VPS so they keep working when your laptop sleeps: orca serve on headless Ubuntu, under systemd and firewalled from the internet.
A deletion request touches more than one table. Find every copy of a user's data in a self-hosted agent memory stack, delete it, and prove it is gone.
Push one commit to GitHub and a bare repository on your own VPS at the same time: two push URLs on one remote, what mirror does, and what it does not copy.
An air gap means no network path at all, and a rented VPS cannot give you one. Build egress-denied inference instead: default-deny outbound, staged weights.
Read the SearXNG service log and /stats to tell a timeout from a suspended engine or a crash like KeyError, then fix each one in settings.yml.
The accelerator sets most of the bill. Learn how VRAM, memory bandwidth, power headroom, cooling and your own tariff decide what the rest costs.
Set TZ in a Compose service, find valid zone names with timedatectl, and understand why container logs show UTC while the host clock is right.
Gate the reboot on evidence the host reports: the Ubuntu marker file, the Red Hat exit code, then reboot in slices so the whole fleet stays up.
Immich splits originals, thumbnails, transcodes and the Postgres database across two host paths. Learn which folders are the only copy and how to move them.
Add a Jellyfin service to an existing arr stack compose file: matching PUID and PGID, one media mount at the same path, and a port bound to localhost.
Update one container in a multi-service stack: docker compose up -d web, why depends_on still starts, --no-deps, start vs up, stop, and --scale.
Wire your arr stack together: indexers in Prowlarr, API keys into Sonarr and Radarr, then qBittorrent as the download client by container name.
Webmin ships no default username or password. The login is a system account. Reset a forgotten password or clear a blocked host from the shell.
Add a new WireGuard client with wg syncconf and wg-quick strip so connected peers stay up, plus wg set, wg-quick save, AllowedIPs collisions and PostUp rules.
Every tailscale serve command you will use, checked on Tailscale 1.102.4: foreground versus background, HTTPS ports, path routing, static files and raw TCP.
What Anthropic's terms say about refunds on Pro and Max, the 14-day EEA and UK window, the App Store and Google Play routes, and the exact steps to ask.
Docker Engine on a VPS is free. Docker Desktop holds the licence: free below 250 staff and $10M revenue. Docker Hub pull limits are the one cost a VPS meets.
Devuan, Alpine, Void, Artix, Gentoo, Chimera and Slackware ship without systemd. What a server admin gives up, and who has a real reason to switch.
The pg_isready healthcheck block for the official postgres image, why a socket probe lies on first boot, the TCP fix, and depends_on with service_healthy.
Yes. The .pub file is meant to be shared. How to tell it from the private key in ten seconds, what a stranger can do with each half, and how to make one.
Broadcast discovery stops at the first router. Here is how to point remote UniFi access points at a controller on your VPS, and keep port 8080 private.
Tailnet lock stops a compromised Tailscale coordination server from adding a node to your tailnet. It also gives you ten secrets you must not lose.
FTP uses TCP 21 plus a separate data channel, FTPS adds TLS, SFTP rides SSH on port 22. Which ports to open, and why plain FTP leaks your password.
Compose runs a multi-container app on one host. Kubernetes schedules across machines. Which one your VPS needs, and the four things only a cluster buys.
A pipe has one reader, so feeding two commands needs tee. Copy a stream to a file, append with tee -a, fan out with process substitution, and read PIPESTATUS.
Copy a directory to another server with tar and SSH: why -f - is needed, where -C goes, who owns the extracted files, and compression in the pipe.
Two VPS, one private network: a provider VPC, a WireGuard tunnel you own, or a managed mesh. Subnet choice, service binding, firewall rules and MTU included.
Claude Pro has no published token quota. Usage is metered in messages per rolling window, and long chats burn it faster. Here is how to see yours.
Which Claude models each paid plan includes, and why the most capable one runs out first while the rest of your Claude Max allowance is still there.
A storage VPS holds terabytes cheaply, but can it stream them? Do the bandwidth arithmetic first, then split the library from the application.
Every Claude plan price in USD as of September 2026, why a card gets declined in an unsupported country, and the open model option you can still run.
Client data in Claude needs the plan with the paperwork. Compare Free, Pro, Max, Team and Enterprise on training defaults, the DPA and admin control.
GitHub stores your code and GitHub Pages serves static files. Neither one runs your app. Here is exactly where that line falls, and what to do at it.
Toronto, Montreal or Vancouver for your VPS: what each Canadian city is actually good for, and how to measure latency from where your users really are.
Two offers, the same spec sheet: one gives you local NVMe, one a network volume. What changes for latency, snapshots, noisy neighbours and failure.
A managed storage box sells terabytes with no shell. A storage VPS sells root. Where the capability line falls, and what 19 % VAT does to the price.
What it takes to run illumos on rented hardware: full virtualisation, custom ISO or console access, virtio drivers, and the honest limits you hit.
Claude Max session limits run on a rolling window that your own activity moves. Find your reset time in the app and the CLI, then plan a UTC+8 day around it.
A VPS inside mainland China needs an ICP filing before it can serve a public site. Offshore hosting skips the filing and pays in route quality. How to choose.
Sequential throughput and random IOPS are two different numbers. See which one a cheap storage VPS gives you, and measure your own volume with fio.
Check whether Claude is sold in your country, what an unsupported market really blocks, and the two legitimate ways to get work done anyway.
Claude Pro spends your limit in tokens rather than messages, and Portuguese costs more tokens than English. Measure the gap and make your quota last.
Move off shared hosting without breaking the site: the inventory cPanel was hiding, a rehearsed cutover, low DNS TTLs, and why mailboxes stay put.
Claude's web checkout takes cards only. A USD invoice on a euro card costs more than the listed price, and your VAT ID has to be on file before the charge.
What a VPS is, which European locations suit a French audience, how to measure latency yourself, and what RGPD and TVA change about the choice.
Attach a second disk to a Linux VPS: find the device with lsblk, make a filesystem, mount it, and persist it in /etc/fstab by UUID with nofail.
EU storage VPS pricing starts with one division: monthly price over usable terabytes. Then check the residency claim, the processing agreement and the disks.
Agent-written docs drift into stale claims and contradictory rules. Cambium answers with a governance kernel and append-only receipts. Who needs it.
Three version numbers in one nginx config. What HTTP/2 multiplexing and HTTP/3 over QUIC actually change, how to enable each, and when it is worth it.
Tailscale has no student checkout. Read on 2026-08-31: schools and nonprofits get 50% off list prices via Support, and Personal stays free for you.
Claude Max bills in USD, so your card issuer sets the TWD or HKD amount you pay. Here is the arithmetic, and what you can claim on your books.
The provider keeps the hardware alive. Updates, the firewall, real backups, abuse mail, RODO paperwork and the VAT on the invoice are yours.
Before you buy a VPS, check these spec sheet lines: virtualisation type, /dev/net/tun, nested KVM, AES-NI, IPv6, GPU and the outbound port 25 block.
Open an account, create a repository, push your code with three git commands, and see the line where GitHub stops: it stores your project but never runs it.
List price in dollars, French TVA at 20 percent, and the euro figure your bank decides. Plus where to get a facture with a TVA number for the books.
Your users are in Mexico, Colombia, Chile or Spain. Here is when a Canadian VPS is the right answer for them, and how to measure your route.
Run down a storage VPS offer before you order: disk class and IOPS, fair use traffic, snapshot quota, root or SFTP only, contract term, and the GDPR paperwork.
Put Authentik in front of any app with Traefik forwardAuth: proxy provider, outpost address, header pass-through, and the redirect loops explained.
Which Gemma 4 tag fits your VPS RAM, what each one costs in tokens per second on CPU, and the sizing arithmetic to check it before you pull 20GB.
Restart, up -d, rebuild or pull: which Docker Compose command picks up an edited compose file, a new .env, a changed Dockerfile or a new image.
Anthropic adds VAT to Claude's listed price, so your card charge is higher. See what a business VAT number changes at checkout and where invoices come from.
One Claude Max subscription covers one person across web, desktop, mobile and Claude Code. Where it stops: API keys bill separately, and seats do not split.
Cloud server, lightweight instance, virtual host: which names mean the same machine, which do not, and how to read the specs that decide performance.
Run the app on a fast small VPS and keep the terabytes on a cheap storage VPS. Join them with NFS, SSHFS or rclone over WireGuard, and survive a lost mount.
What the Claude plans cost, then the honest part: which open-weight model on a VPS you run yourself covers coding, long documents or drafting.
Claude Pro bills in US dollars. A Brazilian card adds its own exchange rate and a separate tax line, so the card statement is the number that matters.
Git is a program that runs offline. GitHub is one remote. A VPS can hold a second. What separates them, and the SSH steps to add that remote.
Size a storage VPS from your own data: photo library, Nextcloud share and a restic repository whose size follows retention, plus the euro per terabyte math.
Your PHP-FPM pool size is a division you run on your own box: measure one worker, subtract what the database needs, then read the number that is left.
HTTP and HTTPS differ on the server side: a second listener, a redirect, HSTS you cannot easily undo, mixed content, and renewal that fails at 3am.
Your SearXNG instance can feed web search to Open WebUI. Enable the JSON format, then hand the other container a URL it can actually reach.
Before you pay for Claude Max, log one week of your own usage. Here is what to record each day, and how each result maps to a plan decision.
Sign up for Claude Pro, get past a card your bank refuses, and find where Claude actually runs: the full sequence and a genuinely useful first hour.
What annual billing on Claude changes, how mid-cycle upgrades are prorated, what a cancellation refunds, and how to get an invoice with your tax ID.
Your visitors are in Poland. Here is how to choose between a Warsaw VPS and the Frankfurt or Amsterdam hubs, and how to measure the difference yourself.
How interchangeable are VPS providers? Audit your current one on images, snapshot export, IPv6 and billing terms, then cut a move down to one evening.
Choosing between a Canadian and a US VPS: distance to your real users, jurisdiction, billing currency, and the peering density that decides speed.
Several terabytes for a few euros a month: what a storage VPS, a block volume and object storage really cost in the EU, and which one restores fast.
An AI agent using a copy of your API key is invisible in the audit log. Give it its own OIDC client in authentik, scope its token, and revoke only that one.
NetBird, ZeroTier, Nebula, Netmaker, Headscale and Twingate, sorted by whether you can really self-host the control plane, and what breaks when you do.
How much monitoring does one VPS really need? Compare htop, Glances, Netdata, Beszel and Prometheus by what each costs to run, and when to move up.
Why put a VPS in Amsterdam: what an internet exchange does, Amsterdam or Frankfurt, EU data residency, and how to measure the latency yourself.
colemak.com will not tell you how long the switch takes. Here is the real learning curve, plus the ranges named typing logs and forum threads report.
Claude Code shows an overloaded message when Anthropic's API returns HTTP 529. Tell that apart from a 429 rate limit and from a plan usage limit.
Autoprompt solves 73 of 89 Terminal-Bench 2.1 tasks against a baseline of 60, at roughly 3x the time and 2x the tokens. What that costs on a rented VPS.
Locked out because cloud-init never made your login user? Find the real username, read cloud-init status and the logs, and get back in from the console.
Your agent wrote the app. Now keep it running: systemd supervision, a reverse proxy with TLS, an env file for secrets, backups, and safe redeploys.
Sourcing a bash script runs it in your current shell. Executing forks a child. Why cd and export do not stick, and why source can close your session.
Tor Browser, Tails and Whonix isolate different things. Work out which one your threat model actually needs, and what each one cannot protect.
Curl your Ollama server on port 11434, read what a refused connection means, tour the API endpoints, and set OLLAMA_HOST without exposing the box.
cloud-init runs once on a new VPS: datasource, user-data, default user, SSH host keys. Read the logs, and fix the fresh image that will not let you log in.
Publish an Onion-Location header in nginx so Tor Browser offers your onion address, then close the leaks that undo it: redirects and third-party assets.
Render an nginx config from a Jinja2 template, notify a handler so it reloads only on a real change, then run the play twice to prove idempotence.
Semantic, episodic and procedural agent memory in one table, then the half nobody writes: what each type costs to store and to re-embed on a VPS.
A save that fails in nano has four usual causes. Check the file owner, the parent directory, a read only or full filesystem, then your uid in a container.
A checksum proves you got the file the publisher sent. A reproducible build proves that file matches the source you can read. Two different claims.
Prompt injection ends with the session. Memory poisoning does not. How hostile text becomes a stored fact, and how to isolate, expire and review it.
DeepSeek V4 Flash on Ollama is cloud only. Get the real disk and RAM numbers for every GGUF build, and see which VPS plan can actually load it.
Your Hyperswitch stack is running on published default credentials with 5432 and 6379 open. Here is the work between that demo and real payments.
Add a second restic repository without doubling your risk: separate init and password, back up twice or use restic copy, split timers, tested restores.
Run Django in production on Ubuntu 24.04: uv or venv, Gunicorn on a Unix socket, a systemd unit, Nginx for TLS and static files, plus what breaks first.
How Debian's suites feed each other, what the security team promises for each, why testing is the weak spot for a server, and how to pin one package.
Mock servers and API test runners do different jobs. Run both on your own box: WireMock stubs in git, Hurl suites in CI, and reports that survive a rebuild.
Plausible, Umami, Matomo, GoatCounter and GoAccess on a small VPS: RAM, database choice, disk growth, reverse proxy setup and the ad blocker gap.
Change Linux permissions with chmod: the octal digits, the u/g/o symbolic form, why a recursive numeric mode breaks a tree, and what capital X fixes.
Move a live server to a new VPS as a rehearsed cutover: inventory, rebuild instead of clone, dump the database, lower DNS TTL early, verify, then switch.
The image key pulls a published tag. The build key makes one locally. What each means on a VPS, why compose up ignores your Dockerfile change, and the fix.
Chunk, embed, store and retrieve on one VPS. A pgvector schema, HNSW sizing, a local embedding model, and the SQL that proves retrieval works.
A snapshot at your provider is not off-site. Put backups on a VPS you control with Proxmox Backup Server or restic, and price the retention first.
Write your own agent skill by distilling one real failure: the SKILL.md anatomy, the description line that decides when it fires, and how to test it.
FreeBSD patches the base system with freebsd-update and finds vulnerable packages with pkg audit. Two separate tools, and two separate feeds to watch.
Measure how much of your traffic is AI crawlers from your own access log, then block or rate limit them in nginx, Apache or Caddy without losing real visitors.
Open SSH, allow a web port, close one, and survive a reboot with firewalld on Rocky or AlmaLinux. Zones explained, plus the --permanent trap.
DNS decides whether your domain reaches your VPS. Learn the records, nameservers, TTL and the caching that makes a DNS change look like it failed.
The watch command re-runs anything every two seconds. Pick a sane interval, highlight the diff, exit on change, and quote pipes so watch runs them.
Three ways to give a coding agent context, and one rule for picking. See what a skill, an MCP server and a rules file each cost in tokens and upkeep.
MCP revision 2026-07-28 removed sessions and the initialize handshake. What that means for your reverse proxy, health checks, timeouts and auth.
Syncthing is peer to peer with no server copy. Nextcloud is a server with accounts and links. Which one fits your VPS, and why neither is a backup.
!! repeats the last command and !$ gives you its last argument. Learn the six bash history expansions worth knowing, plus :p to print one before it runs.
Git is the version control program on your machine. GitHub is one hosted service built around it. What the difference means when you own a VPS.
Simple reflex, goal-based, utility-based, learning, multi-agent: what each type of AI agent is for, and which ones you can honestly self-host.
What RAID 1, 5, 6 and 10 survive, what a rebuild costs, and why VPS hosts pick RAID 10 for NVMe. Plus how to read /proc/mdstat, and why RAID is not a backup.
An LLM is weights that need RAM. An assistant adds a chat surface. An agent adds tools and a loop, and it holds credentials, so it needs a box that stays on.
Run an AI pull request reviewer on a VPS you control: self-hosted runner, diff-scoped prompts, path and size filters, inline comments, and the cost per PR.
The statusLine setting runs a script and prints its stdout under the prompt. Show hostname, directory, git branch and model, so you edit the right server.
Run the Open Connector auth gateway on your own VPS so your agents never hold a SaaS token: pinned image, TLS origin, OAuth callbacks, backups.
An SSD VPS is a virtual server backed by flash, not spinning disks. What that buys is IOPS and low latency, plus three questions to ask before you buy.
A staged path for learning AI agents: concepts, a loop you write yourself, tools, memory, and safety, with one thing to build at every stage.
tty7 is a Rust terminal workbench with a session daemon, native SSH and agent-aware panes. Install it, then see where tmux on the VPS still wins.
AGENTS.md is the README your coding agent reads. What belongs in one, what never does, how CLAUDE.md fits, and a starter template to copy.
Install Listmonk on Ubuntu 24.04 with Postgres, config.toml, a systemd unit and TLS, then connect SMTP and understand what deliverability really costs.
What a trading bot really needs from a VPS: restart discipline under systemd, a correct clock, safe API keys, heartbeats, and honest latency limits.
NVMe beats SATA SSD on IOPS and latency, but on a VPS the hypervisor and your neighbours decide what you get. Measure your own with fio.
UFW is the simple way to run a firewall on a VPS. Set a default-deny policy, allow only the ports you need, and turn it on without locking out SSH.
Running a service as root turns one bug into full server access. Give each service its own unprivileged account, or let systemd do it with DynamicUser.
Lock down SSH on your VPS: switch to key-only login, disable root and passwords with a drop-in config, and layer Fail2ban and a VPN on top.
A fair comparison of Linux and FreeBSD as server systems: base design, licensing, packages, ZFS and jails, containers, and where each one wins.
A strictly hypothetical guide to the least efficient datacenter possible: one beloved server, RAID 0, heat as a strategy, and a monitor that watches itself.