Claude annual vs monthly billing explained
What annual billing on Claude changes, how mid-cycle upgrades are prorated, what a cancellation refunds, and how to get an invoice with your tax ID.
Step-by-step guides to running a Linux server. Exact commands in the order you run them, including the errors you will hit on the way.
What annual billing on Claude changes, how mid-cycle upgrades are prorated, what a cancellation refunds, and how to get an invoice with your tax ID.
Sign up for Claude Pro, get past a card your bank refuses, and find where Claude actually runs: the full sequence and a genuinely useful first hour.
Your visitors are in Poland. Here is how to choose between a Warsaw VPS and the Frankfurt or Amsterdam hubs, and how to measure the difference yourself.
How interchangeable are VPS providers? Audit your current one on images, snapshot export, IPv6 and billing terms, then cut a move down to one evening.
Before you pay for Claude Max, log one week of your own usage. Here is what to record each day, and how each result maps to a plan decision.
Choosing between a Canadian and a US VPS: distance to your real users, jurisdiction, billing currency, and the peering density that decides speed.
Several terabytes for a few euros a month: what a storage VPS, a block volume and object storage really cost in the EU, and which one restores fast.
Ollama Cloud and a self-hosted Ollama share one CLI and one API. See exactly which settings change, and what leaves your machine on each path.
Ubuntu Pro explained for one rented server: what ESM actually extends, and how to check from the command line where your own box already stands.
Which self-hosted helpdesk fits: FreeScout, osTicket, Zammad, GLPI or iTop, and how mail to ticket, agent count and SLAs decide it for you.
A process vanished with no error of its own. Find the OOM kill in dmesg and journalctl -k, and read the disk and network messages a guest kernel sends.
An AI agent using a copy of your API key is invisible in the audit log. Give it its own OIDC client in authentik, scope its token, and revoke only that one.
Snapd refreshes on its own schedule and ignores unattended-upgrades. Hold a snap, set a refresh window, read snap changes, and revert a bad revision.
Argument list too long is the kernel refusing an oversized exec, and the glob you typed is usually why. Reproduce it, then fix it with xargs or find.
What Stalwart's single Rust binary replaces in a Postfix and Dovecot stack, what it cannot fix, and when a mailcow install is still the better call.
How much monitoring does one VPS really need? Compare htop, Glances, Netdata, Beszel and Prometheus by what each costs to run, and when to move up.
NetBird, ZeroTier, Nebula, Netmaker, Headscale and Twingate, sorted by whether you can really self-host the control plane, and what breaks when you do.
Why put a VPS in Amsterdam: what an internet exchange does, Amsterdam or Frankfurt, EU data residency, and how to measure the latency yourself.
colemak.com will not tell you how long the switch takes. Here is the real learning curve, plus the ranges named typing logs and forum threads report.
Claude Code shows an overloaded message when Anthropic's API returns HTTP 529. Tell that apart from a 429 rate limit and from a plan usage limit.
Run a .gguf from Hugging Face or from a local file under Ollama, and fix the chat template mismatch that makes an imported model reply in garbage.
Install Portainer CE on a Docker VPS, turn an existing compose file into a Stack, and handle the socket mount, the 9443 certificate and UI drift.
Run the Outline VPN server, not the wiki app, on your own VPS. Install, access keys, the management API port, and what Shadowsocks does not hide.
Find which base tools on your Ubuntu server are Rust rewrites, which package installed them, and what that changes for your shell scripts and cron jobs.
ProtectSystem, PrivateTmp, DynamicUser and NoNewPrivileges explained: what each directive blocks, what it breaks, and how to debug a unit that stops starting.
A dnf update leaves the old kernel and old libraries running on Rocky and Alma. Use needs-restarting to see what needs a reboot and what needs a restart.
Autoprompt solves 73 of 89 Terminal-Bench 2.1 tasks against a baseline of 60, at roughly 3x the time and 2x the tokens. What that costs on a rented VPS.
Your agent wrote the app. Now keep it running: systemd supervision, a reverse proxy with TLS, an env file for secrets, backups, and safe redeploys.
Debian ships unattended-upgrades switched off. Enable it properly, read Origins-Pattern, check the apt-daily timers, and prove it patches itself.
Locked out because cloud-init never made your login user? Find the real username, read cloud-init status and the logs, and get back in from the console.
What nosuid, nodev and noexec really stop on a Linux VPS, the fstab and bind mount entries for /tmp, /var/tmp, /dev/shm and /home, and what breaks.
Sourcing a bash script runs it in your current shell. Executing forks a child. Why cd and export do not stick, and why source can close your session.
systemd targets replaced runlevels, and the old numbers survive only as aliases. See what a target really is, and how to change what your VPS boots into.
Tor Browser, Tails and Whonix isolate different things. Work out which one your threat model actually needs, and what each one cannot protect.
Debian policy is set by a ranked ballot of about a thousand developers. How a General Resolution is proposed, seconded, counted, and reaches your server.
How the unlazy skill stops an agent declaring done early: the Depth Tree, gates files, the PLAN.md contract, install steps, and what the depth costs you.
Gluetun installs a real firewall kill switch inside its own network namespace. What your containers see when the tunnel dies, and how to prove it holds.
XenForo is licensed software, so the server comes first: the PHP version and extensions, MySQL, writable directories, cron, and the nginx rewrite.
Which self-hosted budgeting apps pull bank transactions automatically, which need manual import, and how Actual, Firefly III, Fava and Wallos compare.
Claude Code is Anthropic's terminal coding agent. What it does, where it runs, what a plan costs, and why it is not a chat window or an IDE.
An Obsidian vault is a folder of markdown, so Claude Code can refile and audit notes. Here is the VPS setup and the permission rules that stop bulk rewrites.
Slow WireGuard is usually an MTU problem. Find your path MTU by bisection, clamp TCP MSS, check steal time, and measure the path before blaming the tunnel.
Your WireGuard handshake works but no host on the home LAN answers. Four settings decide whether a packet reaches 192.168.20.10 and finds its way back.
Curl your Ollama server on port 11434, read what a refused connection means, tour the API endpoints, and set OLLAMA_HOST without exposing the box.
n8n is a workflow automation tool you run on your own server. What it is, how it is pronounced, what a workflow looks like, and when to use it.
Tailscale bills per user, not per device. Work out what a household and a five person team really pay, which limit you hit first, and when Headscale wins.
Searx has taken no code commit since 2023 and SearXNG carries the project now. Check the status yourself, then see what changed for a new instance.
What Nextcloud is genuinely bad at on a VPS: many small files, the sync client on large trees, unconfigured cron, and the memory floor for office.
Run Cloudflare Tunnel on a VPS: named tunnel, credentials file, ingress rules, systemd service, then close 80 and 443 and bind the app to localhost.
The first hour on a Rocky Linux or AlmaLinux VPS: dnf updates, a wheel user, key only SSH, firewalld, dnf-automatic, and SELinux left enforcing.
cloud-init runs once on a new VPS: datasource, user-data, default user, SSH host keys. Read the logs, and fix the fresh image that will not let you log in.
chown sets which user and group own a file on Linux. Create the account first, use chown user:group and chown -R, and fix root owned files after sudo.
AllowedIPs is the routing table and the access list at once. Learn cryptokey routing, the Noise handshake and rotation, and every wg0.conf reads clearly.
The second request waits, or it is refused: how OLLAMA_NUM_PARALLEL and OLLAMA_MAX_QUEUE decide which, and why every parallel slot costs you VRAM.
Work out whether to pay for Claude Pro from how you actually use Claude: how often the free limit stops you, and where Max or the API fits instead.
A 1995 password sniffing attack in Helsinki produced SSH. Here is the verified timeline from telnet and rlogin to OpenSSH and post-quantum defaults.
An output style edits Claude Code's system prompt, so it shapes every reply. What the built-in styles do to your transcript, and how to write your own.
Which self-hosted secrets manager belongs on one VPS: OpenBao, Infisical, SOPS with age, systemd credentials, or a locked down env file, and what each costs.
Self-host OpenBot so each AI coworker gets its own container and browser. How the gateway decides every action, and what that costs you in RAM.
Invoice Ninja, InvoiceShelf, InvoicePlane, Kimai and ERPNext on one VPS: recurring billing, tax, client portal, payment gateways and licence terms.
Why dnf cannot find your package on Rocky Linux and AlmaLinux: what BaseOS, AppStream and CRB hold, how to add EPEL safely, and how to keep repos clean.
Read systemctl status before anything else. What 203/EXEC and 226/NAMESPACE mean, and why a unit can start cleanly and exit one second later.
When SSH drops, the kernel sends SIGHUP and your job dies. Use nohup, disown, tmux or systemd-run to keep it alive, and know which one fits the job.
Most cloud images ship with no swap. Here is when a small VPS needs a swap file, how big to make it, what vm.swappiness trades, and when zram wins.
Two clones sharing one /etc/machine-id can fight over a DHCP lease. Regenerate it safely, and truncate it before you snapshot a golden image.
Zitadel wants 4 cores and 8GB. Set up Postgres, the masterkey, TLS, SMTP and backups on one VPS, and learn what an upgrade does to your database.
Install Flarum on a VPS with PHP, Composer and MariaDB, serve only /public over TLS, and fix the mail and extension upgrade traps that break new forums.
Colemak Mod-DH moves D and H off the centre columns onto the index fingers. What changes, who should switch, and how to enable colemak_dh on Linux.
The bandwidth math that decides your box size, plus Jitsi, BigBlueButton and Galène compared on RAM, open UDP ports and what breaks behind NAT.
Self-hosted n8n is free under a fair-code licence with real limits. What you may do, which features need a paid key, and where cloud plans fit.
Run Hister on a VPS to search the full text of pages you visited and files you keep: binary and Docker installs, TLS, a login, and the MCP endpoint.
SearXNG swaps your IP for your server's IP at the search engines. Who really sees your queries on a public instance and on your own VPS, and where it stops.
Tailscale never holds the keys that encrypt your traffic. The real question is what a compromised coordination server or a stolen identity account can do.
You paid for a higher Claude plan and still hit the same wall. Work through the checks in order: billing timing, account mismatch, org seats, stale CLI login.
Publish an Onion-Location header in nginx so Tor Browser offers your onion address, then close the leaks that undo it: redirects and third-party assets.
Requires, Wants, After, Before, ExecStartPre and the Condition family do different jobs. What each one promises, and how to debug a unit that never runs.
A point release is your Ubuntu with every update rolled into new media. Why a patched server downloads nothing, and why 24.04 waits for 26.04.1.
The Nextcloud server is free software with no licence fee. Here is what an Enterprise subscription really buys, and the costs you pay either way.
Reasoning effort sets how long a local model thinks before it answers. What the levels change on your own hardware, and how to measure the real cost.
Where your bytes sit, whose law can reach them, and what Canadian privacy rules actually require of a VPS. Plus how to verify a location for yourself.
Render an nginx config from a Jinja2 template, notify a handler so it reloads only on a real change, then run the play twice to prove idempotence.
Four ways to authenticate a Claude API client on a VPS: an Anthropic key, AWS IAM on Bedrock, Google ADC on Vertex, Entra on Foundry, plus safe storage.
CGNAT leaves you with no public IP. Put frp on a cheap VPS, dial the tunnel out from home, and terminate HTTPS on the public end with a real certificate.
Run HRConvert2 on your own VPS so client files never touch a free converter site. Docker or Apache install, bubblewrap sandboxing, upload limits and cleanup.
An agent harness is the program around the model: the loop, the tools, the permissions and the session state. How it differs from a model and a framework.
Build a dsh plugin from an empty folder: the package.json fields that matter, the patch file that mounts it, a real tool, and the two hooks you need.
Claude Code on Team and Enterprise: what each seat includes, the seat prices published in August 2026, and when paying per token costs less.
What a fresh k3s install leaves open on a VPS: port 6443, the kubelet on 10250, kubeconfig mode, NodePorts your firewall never sees, and privileged pods.
Cowork ships with every paid Claude plan and no free one, and it spends the same usage budget as chat and Claude Code. Checked 19 August 2026.
Run Codex, Claude Code and Hermes behind one self-hosted API. The exact Docker deploy, the loopback bind, the default login you must change, and TLS access.
OneCLI hands every person a sandboxed agent and keeps the keys in one gateway. Self-host it on a VPS: Docker Compose, PostgreSQL, and real sizing numbers.
Deploy openGym on a VPS with Docker Compose: a pinned git tag, TLS before the first passkey, where the data lives, and the read-only MCP server.
Send mail from self-hosted apps without running a mail server. One SMTP relay at host level, SPF, DKIM and DMARC, and a fix for blocked port 25.
Semantic, episodic and procedural agent memory in one table, then the half nobody writes: what each type costs to store and to re-embed on a VPS.
llama.cpp now cuts v0.x tags beside its bNNNN build tags. Pin one, record it with the GGUF and quant, and treat every upgrade as a drill you can undo.
GLIBC_2.34 not found means the build host set the version floor. Read what a binary really demands, then pick one of four ways to ship it portably.
KVM, Xen and LXC decide whether your VPS has its own kernel, real swap, working nested virtualisation and honest steal time. Find out which one you bought.
Image mode for servers: the system ships as one image, and rollback is a reboot. What bootc, Fedora CoreOS, Flatcar and Talos cost you on a VPS.
Every Postgres connection is a process with its own memory, so a 4 GB VPS runs out of RAM long before max_connections. What a pooler fixes, and what it breaks.
Deer Workflow puts agent orchestration in reviewable TypeScript. Install it on a VPS with Bun, pin the version, and run one graph headless under systemd.
Headless Chrome is the biggest process on a small VPS. Install Moli, serve CDP on loopback, point an agent at it, and learn where it stops working.
Cowork runs in an Anthropic sandbox and touches folders you connect. Claude Code runs on your machine or VPS. Where each one fits, checked August 2026.
A save that fails in nano has four usual causes. Check the file owner, the parent directory, a read only or full filesystem, then your uid in a container.
See what is really listening with ss, then test the port from outside with nc or nmap. Learn why a blocked port hangs while a closed one refuses at once.
dsh prints http://127.0.0.1:3080 because the Web UI binds to localhost only. Reach it safely with an SSH tunnel, and see why publishing 3080 is unsafe.
Run dsh, the DeepSeek Harness, as a systemd service on a VPS: dedicated user, pinned version, Restart rules, journalctl logs, and an SSH tunnel to the UI.
DeepSeek Harness, Claude Code and Omnigent compared on architecture, model coupling, licence and maturity, plus what each one takes to run on a VPS.
Where dsh keeps its config on Linux, how to wire a DeepSeek API key or a local Ollama endpoint, and exactly what leaves your box in each mode.
Every published DeepSeek Harness build is a release candidate. Pin an exact dsh version, clear the npx cache, and check which npm your Node bundles.
Installing a dsh plugin runs someone else's code with your agent's permissions. What a plugin can reach, and how to check one before you install it.
WSL and a VPS solve different halves of a dev setup: uptime, a public address, systemd, filesystem speed, backups, and the SSH bridge between them.
Catch every test email on a throwaway domain with Mailpit, read it in a web UI, and stop your staging app from ever mailing a real customer again.
Forward auth puts an app that has no login behind your OIDC provider. Wire oauth2-proxy into nginx or Traefik, and avoid the cookie and redirect traps.
Too many authentication failures means your SSH agent offered every key it holds and the server cut you off. Diagnose it with ssh -v and fix it for good.
Ansible check mode explained: what --check and --diff really prove, and where a dry run gives you a wrong answer before you apply for real.
FTP logs in fine and then the directory listing hangs. The data channel needs its own ports. Here is the passive range to declare, and the firewall rule.
Port 10250 is the kubelet API. Fix the address already in use error on kubeadm init, and the firewall drops that break kubectl logs and exec.
Find the Nextcloud data directory inside the container, the host path behind the volume, and everything else a restorable backup needs beyond user files.
Incus gives you a container with its own init, users and services. Set one up on a VPS: virtualisation checks, storage pools, networking, and what breaks.
Linux kernel 7.2 adds cache aware scheduling. What CONFIG_SCHED_CACHE changes about task placement, and whether a VPS guest sees any of the gain.
A checksum proves you got the file the publisher sent. A reproducible build proves that file matches the source you can read. Two different claims.
Receiving mail on your own VPS is easy. Getting it delivered to Gmail is the hard part. What deliverability really demands, and when to relay instead.
draw.io, Excalidraw and Kroki on your own VPS: which parts never touch your server, and why that decides whether self-hosting buys you privacy.
Deploy Loomfeed, the agent-friendly Reddit alternative, on a VPS: Docker Compose, Postgres 16 with pgvector, TLS, and honest notes on how new it is.
Build llama-server from a pinned tag, serve GGUF models on the OpenAI-compatible API, bind it to localhost, and run it under systemd with memory limits.
GLM 5.2 is cloud only in Ollama's library. Here is the GLM model that actually fits a VPS, and the RAM each quantisation needs on your own box.
Anthropic started marking Claude output in August 2026. How the watermark biases token choice, and why a detection result proves less than you think.
Your plan quota is a different control. This message means Claude used up the tool calls allowed inside a single turn. Here is how to finish the task.
DeepSeek V4 Flash on Ollama is cloud only. Get the real disk and RAM numbers for every GGUF build, and see which VPS plan can actually load it.
Rocky Linux and AlmaLinux already ship a full metrics stack. Start pmcd, find metrics with pminfo, watch them with pmrep, and cap pmlogger disk use.
Your agent writes a SPEC you approve and an EVIDENCE report you can rerun yourself. Inside the Old Coder gauntlet: what mutation testing adds over coverage.
The seo CLI turns a spare VPS into an SEO audit box: a systemd timer runs the crawl, and your agent queries the results over a local MCP server.
LinkSift has no login and binds to localhost on purpose. Run it in Docker Compose, then put it behind Caddy with real auth or on a Tailscale node.
Run RustDesk hbbs and hbbr on your own VPS: the Ed25519 key, pinned image tags, locked down ports, and the relay bandwidth your plan pays for.
Your Ansible inventory decides which host gets which variable: INI and YAML forms, groups, group_vars, host_vars, connection settings and precedence.
Prompt injection ends with the session. Memory poisoning does not. How hostile text becomes a stored fact, and how to isolate, expire and review it.
Tailscale explained: WireGuard tunnels between your servers, a coordination server for keys and ACLs, NAT traversal, DERP relays, and the threat model.
Your Hyperswitch stack is running on published default credentials with 5432 and 6379 open. Here is the work between that demo and real payments.
Tura claims 77.5% fewer tokens than Codex CLI. Here is how the harness gets there, and how to check that claim against your own provider bill.
Add a second restic repository without doubling your risk: separate init and password, back up twice or use restic copy, split timers, tested restores.
Centralize Linux logins so one change reaches every server. Compare a directory with SSSD, an SSH certificate authority, and Ansible-managed keys.
Run Django in production on Ubuntu 24.04: uv or venv, Gunicorn on a Unix socket, a systemd unit, Nginx for TLS and static files, plus what breaks first.
List every known CVE affecting the packages on your Debian or Ubuntu VPS with debsecan and debvulns, then alert only on the ones that are worth a reboot.
How Debian's suites feed each other, what the security team promises for each, why testing is the weak spot for a server, and how to pin one package.
Five DeepSeek Harness plugins that change how a rented server behaves: budget caps, tool permission rules, injection scanning, durable memory, LAN access.
The DSH web UI binds to 127.0.0.1:3080, so the URL your VPS prints will not open on your laptop. Three safe ways to reach it, and one you should avoid.
Tailscale is free for up to six users with unlimited user devices. Here is what a seat, a device and a tagged resource cost, and when Headscale wins.
Run SandBase Harness v0.3.2 on your own VPS: tagged install, agent YAML, MCP servers, sandbox modes, and pointing the Anthropic SDK at your box.
Tailscale serve puts HTTPS on a tailnet-only URL. Funnel opens that same port to the public internet. Which to use, and the policy gate that blocks funnel.
Muse Glimmer tags run from 17GB to 59GB. Work out the RAM and disk a rented Linux VPS needs before you pull, and what CPU only inference costs.
Your VPS has three clocks and only one matters. Find the drift, read chronyc and timedatectl output, and fix the sync that broke your 2FA login.
ollama pull downloads a model and stops. ollama run downloads it, then opens a chat. Where the files land, why they fill a VPS root disk, how to move them.
Run Rakazo on your own VPS: Node 22, pnpm, Postgres and Graphile Worker in Docker Compose, the sandbox provider choice, key handling, and honest sizing.
The real footprint before you start: ClickHouse, Postgres, Valkey, 4 GB RAM, 25 GB free and four DNS records. Then the install, and what fills the disk.
Moving sshd to a new port on Rocky Linux or AlmaLinux needs firewalld, an SELinux port label and sshd_config. Do it in the order that keeps you logged in.
Run ntfy on your own VPS behind TLS with Docker Compose. Lock topics with users and ACLs, then alert from cron and systemd OnFailure units.
Ubuntu began as a snapshot of Debian unstable in 2004. What 22 years of shared packaging and quiet divergence mean when you pick a server OS.
Abuse mail about your VPS IP follows a fixed pipeline. Who reports, how the notice reaches you, what each category means, and how to answer in time.
GRUB_DEFAULT does nothing on an Ubuntu cloud image. Read the menu entries your server really has, then pin the next boot without risking a rescue console.
A scrub reads every allocated block and verifies it. On a single device VPS pool it finds damage it cannot repair, so here is how often to run one.
Keep passwords and API tokens in a playbook repo safely: encrypt a vars file or one inline string, split staging from production, and rekey cleanly.
Lock an admin panel behind mTLS: build a private CA with openssl, issue client certificates, and configure nginx to refuse anyone without one.
Docker Compose deploy guides stop at the login screen. Here is the rest: what to dump, which volumes to capture, how to prove a restore, and how to upgrade.
Mock servers and API test runners do different jobs. Run both on your own box: WireMock stubs in git, Hurl suites in CI, and reports that survive a rebuild.
An agent proposes an action. A policy service and a person decide it. A sealed executor holds the only credentials. The design that survives prompt injection.
Prefill is compute bound and owns time to first token. Decode is memory bandwidth bound and owns tokens per second. Measure them separately on your own box.
Install the DeepSeek Harness on a Linux VPS, pin the npm version, understand what a plugin can do, and reach the port 3080 web UI over an SSH tunnel.
num_predict caps how many tokens Ollama will write. The three places to set it, which one wins, and how to read done_reason in the response.
Four different failures look like n8n going offline. Learn to tell the websocket banner, a restart loop, an out of memory kill and a dead schedule apart.
The Ollama server ships with no authentication, so anything that reaches port 11434 can run your models and pull new ones. The three fixes, in order.
Plausible, Umami, Matomo, GoatCounter and GoAccess on a small VPS: RAM, database choice, disk growth, reverse proxy setup and the ad blocker gap.
Your VPS disk reads full and a directory walk cannot find the space. Find the deleted file a process still holds open, and the other causes.
Five reasons a cron job never runs: a minimal PATH, an unescaped percent sign, the wrong crontab, output lost to mail, and a script that assumes your shell.
Weekly and monthly checks for a Linux server, plus the release upgrades, with the failure each one prevents and the restore test almost everyone skips.
Resume a Claude Code session by name or from the picker, and find the plaintext transcripts it leaves behind on the machine where the agent ran.
Set up Redis as a WordPress object cache on your own VPS: bind it to localhost, size maxmemory, pick an eviction policy, and verify the cache is real.
Kermit turns 45 and just shipped a new release. The story of file transfer, from noisy phone lines to FTP behind NAT, and why rsync and SFTP won.
Who should put a VPS in Frankfurt: DE-CIX peering, real latency numbers for German and EU users, and what hosting in the EU does and does not do for GDPR.
Open source apps that keep OIDC and SAML in a paid tier: why maintainers price it that way, and the checklist to run before you install anything.
Ansible treats an unreachable host differently from a failed task. Use ignore_unreachable, serial and max_fail_percentage, and still see what was missed.
Change Linux permissions with chmod: the octal digits, the u/g/o symbolic form, why a recursive numeric mode breaks a tree, and what capital X fixes.
Build an nginx reverse proxy server block line by line: proxy_pass, the four headers your app needs, websockets, trailing slashes, and uploads.
Sync calendars across phone and laptop without Google. Set up a CalDAV server on your VPS with Radicale, TLS, discovery and client setup that works.
Open a shell in a running Compose service with docker compose exec, and use run --rm for a service that is stopped or must not be disturbed.
A self-hosted n8n reads three timezone settings, so a schedule trigger can fire hours off. Set TZ, GENERIC_TIMEZONE and the workflow zone right.
Give a Jellyfin container an NVIDIA GPU with Docker Compose, turn on NVENC and NVDEC, and prove the GPU is really transcoding with nvidia-smi.
Run Proxmox Backup Server on a VPS as an offsite target: datastore setup, namespaces per host, prune and garbage collection, encryption keys, restore tests.
Live kernel patching swaps patched functions into the running kernel. What it covers on an unmanaged VPS, and why the reboot is only postponed.
Move a live server to a new VPS as a rehearsed cutover: inventory, rebuild instead of clone, dump the database, lower DNS TTL early, verify, then switch.
Create a private CA with openssl, sign a leaf certificate, then install the root in /usr/local/share/ca-certificates so Ubuntu trusts your internal HTTPS.
Run log management on one VPS: journald and logrotate first, then Loki or OpenSearch, with the RAM floors and retention rules that decide it.
Your app and your index sit on the same VPS, so latency is not the problem. Compare pgvector, Qdrant, Chroma and brute force, and size the RAM correctly.
Your unit says active but the daemon is gone. Pick the right systemd Type= for simple, exec, forking, oneshot and notify, and find the real main PID.
Claude Code hooks run whether the model agrees or not. Where they live, which events fire, what exit code 2 does to a tool call, and the security cost.
OpenSSH already negotiates a post-quantum key exchange by default. Check what your Ubuntu box really uses, and learn why host keys are still classical.
When /boot fills with old linux-image packages, apt stops configuring anything. Find the kernels you can remove safely, and keep the one you booted.
Run LinkBreeze on a VPS with Docker Compose and Caddy: pinned image tags, cookieless click tracking, and the one volume that holds your whole site.
Bash globbing explained: how the shell expands wildcards into filenames before a command runs, plus nullglob, dotglob, globstar and extglob negation.
Sun built ZFS and DTrace inside Solaris, then opened the source. Oracle closed it again. The illumos fork is why you can still run both today.
Downloads work but nothing ever connects in. Set up gluetun port forwarding, push the new port to your torrent client on every reconnect, and verify it.
SearXNG 429 errors have two causes: your own limiter, or the engines blocking your server IP. Read the log, fix the right one, and stop guessing.
Headless Chromium on a VPS breaks in known ways: tiny /dev/shm, sandbox flags, missing fonts, leaked processes. Set the limits before your agent hits them.
Run Navidrome on a VPS and stream your own music library to any phone. Storage sizing, Subsonic clients, offline sync, TLS, and safe backups.
Run Asterisk or FreePBX on your own VPS: SIP trunks, RTP port ranges, the firewall rules that keep scanners out, and how toll fraud starts.
Point Claude Code at Amazon Bedrock or Google Vertex AI: the environment variables, where credentials come from, who gets billed, and what you give up.
Your VPS disk is full and Docker is holding it. Find which of images, containers, build cache or volumes has the space, then prune it without losing data.
The image key pulls a published tag. The build key makes one locally. What each means on a VPS, why compose up ignores your Dockerfile change, and the fix.
How npm supply-chain attacks reach a Node app on a VPS: malicious patch releases, postinstall scripts, typosquats, and the deploy practice that stops them.
A coding agent runs on text an attacker can write. Map the real injection surfaces on a server, then rank the defences that actually shrink the damage.
Convert a PDF, EPUB or folder of internal docs into an agent skill your coding agent loads on demand: install, token budget, headless runs, licensing.
Which message queue belongs on a single server: delivery guarantees, memory and disk cost, restart behaviour, backlog checks, and when Postgres wins.
Run ERPNext on your own VPS with Docker: sizing, the eleven container stack, TLS, outbound email, version pinning, and a restore you have tested.
What it really takes to keep a Matrix Synapse homeserver alive on a VPS: sizing, Postgres, media retention, registration defences, and backups.
Run your own SimpleX SMP relay on a VPS: pinned install, the fingerprint clients need, ports, an unprivileged service user, backups, TLS, and its threat model.
Chunk, embed, store and retrieve on one VPS. A pgvector schema, HNSW sizing, a local embedding model, and the SQL that proves retrieval works.
Run Ollama as a rootless Podman container on a VPS: a dedicated user, lingering, a Quadlet unit that survives reboot, SELinux labels, and a closed port.
Host the UniFi Network Application on a VPS: RAM sizing, Docker with MongoDB, Layer 3 adoption with set-inform, and the ports to keep private.
Your Ubuntu server reports no new release found. Work through the Prompt setting, the LTS point release gate, third party repos and held packages.
Anthropic publishes no memory token price. Remembered text is replayed as input tokens, so your cost tracks how much you replay and whether it is cached.
Graft parses your repo with tree-sitter into a codebase map your coding agent queries over MCP, so it stops rediscovering the same structure every session.
Colemak, Dvorak or QWERTY: what each layout optimises, where the typing speed evidence is weak, and what a switch costs on machines you do not own.
An attacker submits a victim's address to hundreds of signup forms at once. Confirmed opt in and rate limits stop your server sending one of them.
Shell history is not an audit trail. Compare sudo logging, session recording, shell hooks and auditd execve rules, then ship the logs off the box.
Locked out by ufw? Get back in through the provider console, disable the firewall, read the rules that actually applied, and stop it happening again.
On Ubuntu the iptables command already writes nftables rules. Prove it on your box, read the native ruleset, and see where ufw and Docker collide.
Restart= watches only the main process, so a dead child inside the same cgroup is invisible. How Type=, restart limits and the journal really work.
Your terminal sets a TERM name the server has never heard of, so curses programs fail. Fix it with a terminfo entry in your home directory, no root.
The umask decides the mode of every file you create. Print it, create a file and a directory, read the modes back, and see why root and your user differ.
Install FXServer on Ubuntu, pin an artifact build, add your Cfx.re licence key, open 30120 on TCP and UDP, and keep txAdmin off the public internet.
FileBrowser, Filestash, SFTPGo and Cloud Commander compared on scoping, share links, storage backends and auth, plus how to run one without risking your files.
Mattermost, Rocket.Chat, Synapse and Zulip compared on RAM, database, mobile push, SSO, upgrades and licence, using each vendor's own sizing figures.
Run a real graphical desktop on your VPS with xrdp and XFCE, tunnel it over SSH instead of opening port 3389, and see where RustDesk fits instead.
k3s puts the real Kubernetes API on one VPS. What it costs in RAM, why port 80 collides at install, and when Docker Compose is still the right answer.
A line by line teardown of a cheap VPS listing: vCPU oversell, unlimited bandwidth clauses, NVMe claims, renewal pricing, and a 30 minute acceptance test.
A snapshot at your provider is not off-site. Put backups on a VPS you control with Proxmox Backup Server or restic, and price the retention first.
Run NVIDIA Nemotron 3.5 Lightning with Ollama on your own server: the exact tag to pull, how much RAM it needs, and if CPU-only is fast enough.
Write your own agent skill by distilling one real failure: the SKILL.md anatomy, the description line that decides when it fires, and how to test it.
Install Discourse on a VPS with the official Docker launcher: RAM and swap, a real domain, SMTP, app.yml, the rebuild step, TLS and reverse proxies.
Only one vendor publishes an Enterprise seat price. Compare seat minimums, SSO and SCIM, audit logs, retention terms and metered agent usage.
Your instruction file says stop and the agent does it anyway. The mechanics behind that, and a diagnosis you can run before you rewrite the rule again.
FreeBSD patches the base system with freebsd-update and finds vulnerable packages with pkg audit. Two separate tools, and two separate feeds to watch.
On most VPS plans the disk is virtual and SMART never reaches the guest. Here is what you can really monitor, and how to alert before writes fail.
Routing coding agents across models throws away the prompt cache that keeps them cheap. When routing pays, when pinning wins, and the arithmetic behind it.
A fresh Ubuntu server blocks pip install with externally-managed-environment. Choose venv, pipx or uv by what you install, then point systemd at it.
Hash a file with sha256sum and verify it against a SHA256SUMS file. Then flip one byte and watch the check fail, so you learn what a checksum really proves.
Install Agentlas OS v1.2.0 on a Linux VPS: the pinned install, where state lives, how to point it at Ollama, and what an idle agent hub really costs.
Measure how much of your traffic is AI crawlers from your own access log, then block or rate limit them in nginx, Apache or Caddy without losing real visitors.
Running Postgres, MySQL, MongoDB or Redis in a container is fine in production. The risks are volumes, upgrades, backups and memory limits.
Recover a headless server that fails to boot after a kernel upgrade: provider console, GRUB previous kernel, initramfs and LVM failures, and prevention.
Two SSH errors, opposite causes. Refused means the server answered. Timed out means nothing answered at all. Learn which test to run, and from where.
Your VPS is compromised. Isolate it at the provider firewall, snapshot the disk as evidence, rotate every key it held, then rebuild from a clean image.
Ubuntu 26.04 makes sudo-rs the default sudo. Here is the sudoers delta that matters: wildcard argument rules stop matching, and what to write instead.
nginx returns 403 and the permissions look fine. Read the SELinux denial, fix the label with semanage and restorecon, and leave enforcing on.
Open SSH, allow a web port, close one, and survive a reboot with firewalld on Rocky or AlmaLinux. Zones explained, plus the --permanent trap.
Tor and a VPN answer different questions. See exactly who learns what at every hop, and why a VPS rented in your name is not an anonymity tool.
Install Docker Engine on Rocky Linux or AlmaLinux with dnf, then fix what Ubuntu guides skip: podman owning the docker command and SELinux on bind mounts.
Configure dnf-automatic on Rocky Linux and AlmaLinux: security-only mode, the systemd timer, email alerts, and a reboot policy that avoids surprises.
How Red Hat Linux split into Fedora and RHEL, why CentOS existed, what the 2020 CentOS Stream change broke, and where Rocky Linux and AlmaLinux came from.
ZFS gives a server checksummed data, free snapshots, send/receive replication and cheap compression. The ARC also takes your RAM. How to judge that on a VPS.
Almost every Linux distribution descends from Slackware, Debian or Red Hat. Trace the family tree, the package managers, and what your VPS images inherited.
Set up a guard or middle Tor relay on a Linux VPS: torrc, bandwidth accounting that protects a metered plan, nyx monitoring, and the slow consensus ramp.
Run a v3 onion service on Ubuntu with tor and nginx bound to loopback, then close the leaks that link the address back to your public IP.
Tor began as onion routing research inside a US Navy lab in 1995. Here are the dated milestones, and a straight answer on who funds the network.
What a Claude Code plugin is, where it lives, how to install one, and what it really costs: nothing for the mechanism, tokens for everything it loads.
Rocky Linux and AlmaLinux rebuild the same Red Hat sources. What differs is the compatibility promise, and whether older CPUs are still supported.
Podman runs containers with no daemon and rootless by default. What that changes on a rented server: compose files, quadlets, ports and volume ownership.
How Unix became Linux: Bell Labs in 1969, AT&T licensing, Berkeley BSD, the 1992 lawsuit, and why the server room went to Linux instead of BSD.
Pick an Ollama quantization with arithmetic instead of guesswork: what q4_K_M, q8_0 and fp16 cost in RAM, and where the quality actually drops.
Three services, one VPS, one public IP. How Nginx, Caddy and Traefik differ on certificates, config cost per app, websockets and Docker routing.
What SysV init could not do, what Upstart and launchd tried first, why every distribution moved to systemd in four years, and which objections were right.
Jails isolate a full FreeBSD userland; Docker ships layered images from a registry. How the two models differ on software, state, networking and limits.
Put sshd behind a Tor onion service so the VPS answers on no inbound port. Setup, v3 client authorisation, and the exact order that avoids a lockout.
Run an obfs4 Tor bridge on one cheap VPS: torrc directives, port choice, firewall, the log lines that prove it works, and how users get your bridge.
A history of the Linux kernel from 0.01 to 7.x: the GPL switch, the microkernel argument, the birth of git, the LTS model, and what each means for servers.
A Fedora release gets about 13 months of updates, so a Fedora server needs a version upgrade every year. What that costs, and when Fedora is worth it.
Ubuntu, Debian, Rocky, AlmaLinux, CentOS Stream or Fedora: choose by support lifetime, package age, RHEL compatibility and whose docs you follow.
Your AGENTS.md is wrong three weeks later and the agent trusts it. Use dox to regenerate the file from the repo, then review the diff like code.
A three year cost model at 1 TB, 4 TB and five seats: a Dropbox subscription against a storage VPS, offsite backup, a domain and your own hours.
Both top tiers cost $200 a month. Compare what usage each buys, whether the coding agent is included, and how each one behaves when you hit a limit.
Open source projects disagree on AI-assisted code. Find the project's policy before you open the pull request, and disclose it in the commit trailer.
A server in Brazil is worth the premium for some workloads and wasted on others. Here is what the distance costs your users, and how to measure it yourself.
The dnf command for every apt command you already know, on Rocky Linux, AlmaLinux and Fedora, plus the repository and rollback parts that do not map.
We run Tor exit relays, so here is the real job: picking an exit-friendly host, exit policy, ContactInfo, reverse DNS, and answering abuse mail.
From the Homebrew Computer Club to the SSPL: how the GPL, the 1998 rebrand and today's relicensing wave shaped the apps you self-host today.
The VPS you rent is a direct descendant of 1960s time-sharing. Trace the line through CTSS, Multics, Unix, IBM VM/370, Xen and KVM, and what never changed.
Why the GPL, MIT and Apache 2.0 exist, what each one asks of you, and what the SSPL and BUSL relicensing wave means if you self-host the software.
Four kinds of traffic leave a coding agent, and only one is unavoidable. Audit any agent from the machine itself, then cut the traffic you did not agree to.
Most Tailscale install errors on Ubuntu are apt errors. Read the status code apt printed, then fix the release codename or the signing keyring.
Compartment keeps agent memory encrypted on your own machine, fully offline. What that threat model really covers, and what happens if you lose the key.
Run Whisper transcription and Piper text to speech on your own VPS. What it costs in CPU time and disk, and how to expose an OpenAI compatible endpoint.
Sentry self-hosted wants 16 GB RAM. GlitchTip runs in 512 MB. Compare RAM, disk growth, container count and upgrade pain before you pick one.
Two readers, two answers. A standard VPS cannot play games for you, and here is the reason. Hosting a dedicated game server on one works well.
Why so much network capacity landed in the New York and New Jersey metro, when an East Coast VPS beats a central US one, and how to measure it.
SSH is an encrypted channel to a remote server. Learn the client and server model, port 22, host key fingerprints, and key versus password login.
Linux kernel 7.1 shipped on 14 June 2026. Here is what reaches a VPS tenant, how to check the kernel you run now, and when 7.1 arrives on your distro.
Run open-kritt on a VPS: Docker Compose setup, pinning a release, SSH tunnel to the UI on port 5173, and the provider budget to set before your first scan.
Permission denied (publickey) is five different faults. Read the ssh -v output, find which one you have, and fix it without locking yourself out.
One root AGENTS.md in a monorepo goes stale and burns context on directories the agent never opens. Here is the nested layout that fixes it.
apt update says a target is configured multiple times. Find the legacy .list and deb822 .sources pair, keep one, and get a clean update run back.
Halcyon rebuilds your Jellyfin library as a walkable 1990s rental store in the browser. The Docker command, the reverse proxy, and the honest caveats.
Pick a model by the RAM you actually have. Sizing arithmetic for 4 GB, 16 GB and 64 GB VPS plans, honest CPU token rates, and the hidden cost of context.
LiveContext CE is a six container Docker stack with a Java backend that wants 8 GB. Size it, pin the version, put Traefik in front, and back up both stores.
Deploy Chatwoot on a VPS with Docker Compose and Traefik: pinned tags, SMTP that actually sends, Postgres and uploads backups, and safe upgrades.
Firecracker needs /dev/kvm, and most VPS plans never pass it through. Check yours in three commands, read the result, and know what to run when it is missing.
An interim Ubuntu release gives you nine months and a forced upgrade. An LTS gives you five years. Here is what each costs on a server you run.
DNS decides whether your domain reaches your VPS. Learn the records, nameservers, TTL and the caching that makes a DNS change look like it failed.
The KV cache is RAM your server pays for on every request. Prompt caching is a bill someone else discounts. Only one can break a model load.
Four ways to run a self-hosted Git server, ranked by RAM: bare repos over SSH, cgit, Forgejo or Gitea, and GitLab. See what a 1 GB VPS can host.
ARM VPS plans usually cost less per core. The compatibility checks that decide whether your stack runs on arm64, and the commands that prove it.
Ollama truncates long prompts at a small default context window. Set num_ctx per request or server wide, and size the KV cache RAM before you raise it.
Ollama unloads your model after 5 minutes idle, so the next request pays the full load time again. Set keep_alive so it sticks, even after a reboot.
A capped process can still stall your whole VPS. Set MemoryHigh, MemoryMax, CPUQuota and TasksMax on a systemd unit, and read the OOM kill after.
Auto mode becomes the Claude Code default on 14 August 2026. What each permission mode does, and which one a server you cannot watch deserves.
One Claude Code session can send text to another on the same VPS. What ListAgents and SendMessage do, when a second session helps, and why messages get held.
Deploy Planka on a VPS with Docker Compose: Postgres, Traefik, the admin bootstrap variables, and the BASE_URL setting that breaks your logins.
Readarr retired in 2025. Chaptarr is the fork that runs audiobooks and ebooks in one instance: a Compose service, PUID and PGID, and the metadata break.
What Django and Flask really cost on a 1 to 2 GB VPS: resident memory per gunicorn worker, and how many workers a small box can honestly run.
The watch command re-runs anything every two seconds. Pick a sane interval, highlight the diff, exit on change, and quote pipes so watch runs them.
You ran rm -rf on the wrong path. Stop writing to that disk now, then work through the recovery options that actually exist on ext4, in order.
Nextcloud alternatives sorted by what you keep: file sync only, faster sync with a lighter server, object storage, or plain SFTP. With migration costs.
A snapshot lives on your provider's infrastructure, so it is not a backup. What each one restores, and what to fix on a cloned VPS before it runs.
One user was fine, five crawl. How batching, KV cache limits, prefill and queue depth decide how many people your LLM server can serve at once.
Point a coding agent at a model you host: the base URL, the dummy key, the context length that breaks everything, and the jobs a local model wins.
Three ways to give a coding agent context, and one rule for picking. See what a skill, an MCP server and a rules file each cost in tokens and upkeep.
A Claude Code plan pays for itself in recovered hours. Here is the arithmetic at your own rate, the cases where it fails, and the VPS cost nobody counts.
Run AFFiNE on one VPS with Docker Compose: the four containers, pinned image tags, where your data lives, backups, and what 2 GB of RAM really buys.
Cockpit or Webmin on your Ubuntu VPS: what each panel can change, how each logs you in, why neither belongs on a public port, and when to use neither.
Run Iva, a self-hosted Telegram AI assistant, on a small VPS: no open ports, no domain, systemd user services and an Obsidian vault you back up.
Agent memories go wrong quietly. Put an expiry on time bound facts, cascade the deletes, review the rest, and read your SQLite store with sqlite3.
Cal.com, Easy!Appointments, Rallly and DayOtter on your own VPS, compared on the two things that decide it: two-way calendar sync and outbound email.
Three self-hosted SSO servers, one small VPS. The RAM floor each one really needs, which handles apps that speak no SSO, and where each one loses.
PUID and PGID are not Docker settings. They are an entrypoint convention in linuxserver.io images. Why bind mount files land as 911:911, and how to fix it.
MCP revision 2026-07-28 removed sessions and the initialize handshake. What that means for your reverse proxy, health checks, timeouts and auth.
Run the NetBird mesh VPN on one VPS: DNS and TLS setup, the pinned quickstart script, setup keys for unattended peers, and how it compares to Headscale.
Advertise a private network to your tailnet from a VPS: route approval, IP forwarding that survives a reboot, and the --accept-routes flag Linux needs.
Paritok compresses the file reads and tool output your coding agent sends. The project claims 74% fewer tokens. Here is the mechanism and the break-even math.
Deploy Octop on a VPS with Docker Compose pinned to a tag: per-user isolation, an OpenAI-compatible model backend, TLS, and why to skip the curl installer.
Set Colemak on the Linux console, in X11 and on Wayland, learn why an SSH server needs no layout, and what happens to Vim's hjkl and Ctrl keys.
Syncthing is peer to peer with no server copy. Nextcloud is a server with accounts and links. Which one fits your VPS, and why neither is a backup.
What runs natively on Linux today: the beta desktop app from apt, the Claude Code CLI, editor plugins, and which paid plan covers each one.
!! repeats the last command and !$ gives you its last argument. Learn the six bash history expansions worth knowing, plus :p to print one before it runs.
Which office server belongs next to Nextcloud: vendor RAM floors, the CODE connection limit, docx fidelity, and what really fits a 2 to 4 GB VPS.
Check whether your VPS exposes AES-NI, measure what a masked CPUID costs your AES-GCM throughput, and force the bits back on with OPENSSL_ia32cap.
Steal time is the CPU your VPS was ready to use and never got. Learn to read the vmstat st column and to tell a noisy neighbour from your own overload.
Git is the version control program on your machine. GitHub is one hosted service built around it. What the difference means when you own a VPS.
What a game server VPS really needs: fast single core speed and enough RAM. Sizing, ports, systemd restarts, backups, and why latency is about location.
Vaultwarden encrypts every vault item in the client, so the server holds no plaintext. The real risks are your admin token and your backup file.
Turn your VPS into a Tailscale exit node: install, advertise, enable IP forwarding, approve the route in the admin console, then fix DNS and IPv6.
Run KiroCrew as a pinned container on your own VPS so memory and schedules survive reboots. Docker, systemd, SSH access, backups and rollback.
Six server jobs Claude does well: reading a failed unit's logs, drafting systemd units, reviewing nginx and Compose files, plus what you must never paste.
Yes, on Pro, Max, Team and Enterprise, and no on the free plan. See what shares your usage window, and when an API key quietly bills you instead.
Copy a skill into eight repos and the copies drift. Treat skills like dependencies: one shared repo, and a version each project pins and reviews.
Superlog turns OTLP traces, logs and metrics into incidents an agent triages. Run the self-hosted stack on your own VPS, and know the real footprint first.
Simple reflex, goal-based, utility-based, learning, multi-agent: what each type of AI agent is for, and which ones you can honestly self-host.
One always-on coding agent runs on 4 GB and 2 vCPU. The builds and language servers it launches are what fill the box, and what makes it hang.
A rented GPU only beats per-token billing above a throughput floor. Measure tokens per second properly with a concurrency sweep, then decide.
ENTRYPOINT is what runs and command supplies its arguments. See all four override combinations in Compose, and why setting entrypoint clears CMD.
What an Immich backup must contain, why copying the Postgres data directory is not a backup, and the restore mistake that leaves a timeline empty.
Seafile splits files into blocks for fast sync. Nextcloud keeps files on disk and runs apps. Compare sync speed, RAM, backups and encryption.
Read drwxr-xr-x one character at a time and map it to 755. Learn why x on a directory means traverse, and why chmod 777 is never the right fix.
HTTP explained for people who run servers: methods, status codes, the headers that matter, what nginx logs, and where HTTP/3 and TLS fit in.
A storage VPS trades NVMe speed and CPU for cheap terabytes. See which spec lines separate it from a standard VPS, and which workload each one fits.
Seven levers that cut a Claude bill: annual billing, right sizing the plan, cheaper models, smaller context, prompt caching, batch jobs, and real discounts.
Team or Enterprise for Claude? Compare seat minimums, billing terms, SSO and SCIM, data controls, and where Claude Code fits, with two worked examples.
The fable-method repo turns Claude Fable 5's habits into agent skills. What each file does, what ports to other models, and how to A/B it on a VPS.
Claude Free, Pro, Max 5x and Max 20x beside ChatGPT Free, Go, Plus and Pro at August 2026 prices, plus which one is cheaper for coding work.
Cancel or downgrade a Claude plan without losing the month you paid for: when billing stops, what changes at period end, and when Max to Pro costs nothing.
Copy a live Vaultwarden vault with sqlite3 .backup, keep the attachments, config.json and rsa_key files, then prove the restore works before you need it.
Planka, Vikunja, Focalboard, Wekan and Kanboard compared on RAM floor, database, SSO, Trello import and which of them are still maintained.
Compare DigitalOcean alternatives on price per GB of RAM, included transfer, NVMe storage and backup costs, with a cutover plan that avoids downtime.
Run OpenTag on a VPS so Slack and GitHub mentions reach your coding agent: TLS ingress, webhook signature checks, token scopes, and safe defaults.
Claude Code spend trackers answer different questions. Compare local log parsers against the built-in usage screens and your own OpenTelemetry stack.
Renting a GPU by the hour beats per-token API billing only above a certain volume. Here is the formula and the monthly token count where it flips.
WP-Cron only fires when someone loads a page, so it stalls on quiet sites and piles up on busy ones. Move it to system cron with WP-CLI, and verify it ran.
Your Hermes agent runs on a VPS. Reach it from a phone over a private mesh or a public HTTPS endpoint, and revoke access when the phone goes missing.
Build an eval loop you own: golden cases from real traces, cheap deterministic checks first, an LLM judge second, and a pass rate you track per commit.
Run one OpenAI-compatible endpoint in front of every provider you use: LiteLLM on a VPS with virtual keys, per-key budgets, fallbacks, and pinned images.
Miniflux, FreshRSS, CommaFeed, yarr and Tiny Tiny RSS on a VPS: memory budgets, database needs, Fever and Google Reader API support, and upgrade behaviour.
Immich documents 6 GB of RAM as its minimum. Here is what the server, Postgres, Redis and machine learning each need, and how to run it on 4 GB.
What RAID 1, 5, 6 and 10 survive, what a rebuild costs, and why VPS hosts pick RAID 10 for NVMe. Plus how to read /proc/mdstat, and why RAID is not a backup.
A VPS separates you from other customers at the hypervisor. The real risk is your own setup: open services, reused keys, unpatched packages, leaked secrets.
When a Toronto VPS is worth it: Canadian data residency limits, real latency to the GTA and northeast US, TorIX peering, and when to host somewhere else.
There is no Qwen 3.8 on Ollama yet. Here is the arithmetic for running the 27B tag that does exist on a CPU-only VPS, and what fits in 8 to 64 GB.
Run an MCP email server on your VPS so Claude can triage your inbox. App password scoping, sender allowlists, draft-only replies, and the injection risk.
Bitwarden's own server wants a dozen containers and 2 GB of RAM. Vaultwarden serves the same API in one. Here is which one belongs on your VPS.
Hit a Claude usage limit? Work out which window you are waiting on, then pick a route: smaller model, smaller context, usage credits, or the API.
Draco, Hound and self-hosted Firecrawl compared on RAM, headless browser needs and API compatibility, with a pinned install and an MCP wire-up.
Build a self-hosted stock research agent on a VPS: a market data feed, a DuckDB store, a systemd timer that fires at market close, and an LLM screen.
A container behind Gluetun has no interfaces of its own. Publish its ports on Gluetun, and open only the subnets it must reach outside the tunnel.
Docker on a VPS is the same engine with less room: RAM runs out, published ports skip UFW, containers stay down after a reboot, and disk fills up.
Claude output tokens cost five times input. Here is why decoding is slower than prefill, and what that asymmetry does to a real agent bill each month.
Run the sandboxd AI app builder on your own VPS: pinned install, model keys, HTTPS preview URLs, RAM and disk floors, and cleaning up stale sandboxes.
Dormice runs E2B-compatible agent sandboxes on one VPS you own. Install it, execute code in a sandbox, check the isolation, and size the host.
An LLM is weights that need RAM. An assistant adds a chat surface. An agent adds tools and a loop, and it holds credentials, so it needs a box that stays on.
Activepieces, Windmill, Node-RED, Automatisch and Huginn measured against n8n on licence, RAM, database, AI steps and the backup that breaks restores.
Free cPanel alternatives for a VPS: Virtualmin, ISPConfig, CyberPanel, HestiaCP, CloudPanel and Froxlor, with install commands and the migration traps.
Install Cloudron on a fresh Ubuntu VPS: the wildcard DNS record, the setup script, first boot, sizing for 2 to 10 apps, mail, certificates and backups.
Ubuntu 24.04 does not offer 26.04 until the 26.04.1 point release lands. Here is the safe upgrade order, and the server services that break.
Why $(...) runs in a subshell, so cd and variables vanish, why backticks nest badly, and the process substitution tricks that keep state in your shell.
What a Dallas VPS actually gives you: central US latency to both coasts, dense carrier peering, the ERCOT grid question, and when to host elsewhere.
A VPS is one physical server sliced by a hypervisor into private machines with their own kernel and root login. What that gets you, and where it stops.
Run Langfuse on your own VPS: the real resource floor, pinned image tags, TLS, ClickHouse retention before it fills the disk, and backups that work.
Put a container behind a Gluetun sidecar and its ports vanish. Here is why the shared network namespace does that, and the compose file that works.
Run the mem0 memory server on your own VPS: the real RAM floor, a Compose file that binds to localhost, TLS in front of the API, and a fully local Ollama path.
Open WebUI, LibreChat, Hollama and OrionChat compared on a VPS with a public IP: RAM left for the model, logins, remote Ollama, and upkeep.
Run an AI pull request reviewer on a VPS you control: self-hosted runner, diff-scoped prompts, path and size filters, inline comments, and the cost per PR.
Anthropic lists Claude Code in US dollars. Your bill adds a card conversion markup and local VAT or GST. Here is the arithmetic, country by country.
An agent skill is a folder with a SKILL.md file that loads only when your request matches it. Why that beats one giant prompt, and how it differs from MCP.
Claude Pro costs $20 a month, or $17 billed annually. Here is what it adds over the free plan, and the point where its usage limits stop you.
Cache writes cost 1.25x and reads 0.1x, so a Claude prefix pays back on its second use. Derive your own break-even, then prove it from the API.
Claude Fable 5 lists at $10 per million input tokens and $50 per million output. Here is what the published rates mean for the jobs you actually run.
Output tokens cost five times input, and every turn re-reads your whole context. See the arithmetic on one real session, and the four levers that cut it.
Omnigent drives the agent CLIs you already have installed. What a meta-harness is, how to pin release 0.7.0, and how to sandbox each sub-agent on a VPS.
Kimi K3 is 2.8 trillion parameters. Here is the VRAM arithmetic, the KV cache math, and the three honest ways to run it without a 32 GPU cluster.
Discourse, Flarum, NodeBB and phpBB on a VPS: the RAM each really needs, the database it drags along, the spam story, and the migration path out.
Your host says NVMe. Check it from inside the guest with lsblk, sysfs, nvme-cli and a bounded fio latency run, and learn why virtio hides the disk.
Shared hosting or a VPS? The real split is root access and who fixes the server when it breaks. When shared hosting still wins, and the four signs to move.
Your SearXNG instance can be the search backend for an AI agent. JSON API setup, the trust boundaries, and the prompt injection surface it opens.
llama.cpp is the engine, Ollama is the layer on top. Which one to run on a CPU-only VPS, how quantisation choice changes RAM, and when neither fits.
The statusLine setting runs a script and prints its stdout under the prompt. Show hostname, directory, git branch and model, so you edit the right server.
Nextcloud, Seafile, Syncthing and object storage compared: sync topology, what each really costs on a small VPS, and why sync is not backup.
Claude Code costs $20 a month on Pro, $100 or $200 on Max, or per token with API credits. Prices as of August 2026, with a worked monthly estimate.
Claude Max sells at two prices: 5x Pro usage or 20x. The models and features match. Here is what the multiplier means and which tier fits your work.
AGENTS.md tells a coding agent how to work in your repo. DESIGN.md tells it why the code is shaped that way, so it stops undoing your decisions.
Perplexity open sourced Numbat, an endpoint monitor that records what AI coding agents really do on your servers. What it sees, and what it cannot stop.
Managed or unmanaged VPS? Price the labour: patching, firewall, backups, monitoring, the 2am reboot. What managed leaves out, plus the middle path.
Claude bills per million tokens, input and output priced separately. Here is the arithmetic that turns a token count into a number on your monthly bill.
What MiMo-Code actually is: Xiaomi's MIT-licensed terminal coding agent, forked from OpenCode. Read the self-reported benchmark claims before you switch.
Ponytail makes a coding agent take the smallest change that works. What it ships, what its own benchmarks show, and how to copy the rule today.
Change a VPS root or user password on Ubuntu with passwd, chpasswd and chage, verify it works, and get back in when SSH or the root password is lost.
Neither API wins every workload. Learn the token arithmetic once, then read three costed jobs and see exactly where the Claude bill runs higher.
Run the Open Connector auth gateway on your own VPS so your agents never hold a SaaS token: pinned image, TLS origin, OAuth callbacks, backups.
Claude Enterprise lists a $20 seat price, then meters every token at API rates. What the seat minimums, audit logs and negotiated quote really cover.
Bento is an MIT licensed office suite that ships as one HTML file. What that shape buys you on a small VPS, and what it costs against Nextcloud.
Only one reason forces a Canadian server, and it is not latency. What PIPEDA really requires, and how to measure the round trip from where your users are.
An SSD VPS is a virtual server backed by flash, not spinning disks. What that buys is IOPS and low latency, plus three questions to ask before you buy.
Run Authentik on Docker Compose for one login across every app you host: the env values that matter, the akadmin bootstrap, and forward auth via Traefik.
Memmy gives your AI agents one shared memory store. Build it from source on Ubuntu, run the memory service on port 18960, and keep every note local.
Two self-hosted photo servers compared: the real RAM floors, the phone apps, the maps, and the exact backup commands each one needs on a VPS.
A staged path for learning AI agents: concepts, a loop you write yourself, tools, memory, and safety, with one thing to build at every stage.
Restic reaches S3 and object storage on its own. Borg wants its binary on the far end and pays that back with speed over SSH. How to pick, with commands.
No free tier, a small credit at signup, and several parts that cost nothing at all. The July 2026 rates, plus a worked cost for a first small app.
The Compose commands you reach for every day, grouped by job: lifecycle, applying changes, logs, shells, networks, volumes, and cleanup that is safe.
tty7 is a Rust terminal workbench with a session daemon, native SSH and agent-aware panes. Install it, then see where tmux on the VPS still wins.
The real cost of a Proxmox box at home versus a rented VPS: hardware and power math, what each is better at, and the hybrid setup most people run.
Run WireGuard behind the wg-easy web UI with Docker Compose: the ports, NET_ADMIN, the sysctls that matter, and QR code onboarding for phones.
Run your own URL shortener on a VPS with Shlink and Docker Compose: short domain DNS, Postgres, API keys, the web client, QR codes and click stats.
A VPS is a computer you rent. A VPN is an encrypted tunnel for your traffic. What each one does, what each costs, and how one can host the other.
Make Docker Compose services come back after a reboot: restart policies, why on-failure does not survive one, and when a systemd unit is right.
Run your own Tailscale control server on a VPS. Install headscale from the official .deb, set server_url before you start it, then join your first node.
Tailscale is WireGuard plus a control plane. What that coordination server buys you, what it costs you, and which of the three belongs on your VPS.
Run SearXNG on your own VPS with Docker Compose: settings.yml, the limiter, nginx with TLS, and a JSON search API your own scripts can call.
Run the official Supabase Docker stack on a server you own: the secrets you must replace, what the fourteen services do, RAM needs, backups, and updates.
Ollama is a convenience layer for one user, on CPU if needed. vLLM is a throughput engine for GPUs. Pick by workload, with the real commands for both.
Claude's weights are not public, so no server of yours can run it. Here is what you can self-host instead: open models, a gateway, and Claude Code.
Recall is a fully local plugin that logs each Claude Code session and condenses it into a resumable summary. Set it up on a VPS and measure the saving.
Terraform creates the VPS, Ansible configures it. The real split, why provisioners fight both tools, the handoff commands, and when you need only Ansible.
When a flat Ansible playbook is enough and when a role earns its directories: the role layout, ansible-galaxy init, role calls, and variable precedence.
An agent holding your API keys can leak them in one tool call. Give it scoped short lived tokens behind a credential gateway, never the real keys.
Claude Code runs in tmux on a VPS and your phone is only the window. SSH keys, mosh for flaky mobile data, tmux attach, and the keyboard fixes that matter.
Loop engineering means designing the trigger, boundary, verification and budget an AI agent repeats, instead of writing one clever prompt. A plain definition.
Seat math for a 3 to 15 person team as of July 2026: standard and premium seat prices, when an API key beats a seat, and worked examples at 5 and 12 people.
AGENTS.md is the README your coding agent reads. What belongs in one, what never does, how CLAUDE.md fits, and a starter template to copy.
Twenty things people really run on a VPS, from websites and VPNs to photo storage, game servers and AI agents, with honest RAM needs for each.
Set memory and CPU limits in Docker Compose so one greedy container cannot take down your VPS: deploy.resources, mem_limit, exit 137, swap, sizing.
AI coding agents belong on a machine you can destroy. Blast radius, clean state per task, snapshots, and the VPS pattern that keeps it cheap.
Run Mealie on your own VPS with Docker Compose. Paste a recipe link and get clean steps, plus meal plans, shopping lists, nginx, TLS and backups.
What the Claude free plan includes, how its usage limits are counted and reset, why the API has no free tier, and when paying starts to pay off.
Three self-hosted wiki apps compared on setup weight, editing model, login options and search, with a clear pick for solo admins and for teams.
How compose.override.yaml loads on its own, what file order really merges, the ports trap that keeps a port open, and include for a dev and prod split.
Run Prowlarr, Sonarr, Radarr and qBittorrent from one Docker Compose file on a VPS, with the shared PUID, PGID and volume layout that keeps hardlinks working.
There is no individual student discount on Claude as of July 2026. Here is the free tier, the university route, and a coursework month costed on the API.
Build a working AI agent in n8n: the AI Agent node, a Claude model credential, an HTTP Request tool, memory, a trigger, and the settings that cap cost.
Run Actual Budget on a VPS with Docker Compose: the data volume, why the browser needs HTTPS, your first budget file, bank imports, and backups.
Run paperless-ngx on a VPS with Docker Compose: the official Postgres stack, PAPERLESS_URL, the consume folder, OCR languages, HTTPS, and backups.
A GPU on a VPS buys batch throughput and room for large models. Quantized chat models, embeddings and Whisper small run fine on CPU. Start there, measure.
What open video models really produce in July 2026, the VRAM class each one needs, what a five second clip costs on a rented GPU, and when to use an API.
Run MinIO on one Ubuntu 24.04 VPS for an S3 API you own: verified binary install, systemd unit, mc basics, presigned URLs, and a restic backup target.
Register a self-hosted GitHub Actions runner on Ubuntu 24.04: dedicated user, checksum, config.sh, a systemd service, and the fork pull request risk.
Install Listmonk on Ubuntu 24.04 with Postgres, config.toml, a systemd unit and TLS, then connect SMTP and understand what deliverability really costs.
Benchmark a VPS properly: yabs.sh first, then fio, sysbench and iperf3 by hand. What the numbers mean, and why a single run tells you almost nothing.
SQLite is the right production database for most small apps on one VPS. WAL mode, busy_timeout, Litestream replication, and the limits that break it.
WireGuard wins for almost every self hoster on speed, config size and audit surface. Here is the evidence, and the four cases where OpenVPN still wins.
A VM is the technology, a VPS is that VM sold as a product, and a VPC is a private network in the cloud. Here is what each word implies, and which you need.
What really separates a shared hypervisor from a whole machine: noisy neighbours, steal time, price steps, and when each one is the cheaper buy.
What a trading bot really needs from a VPS: restart discipline under systemd, a correct clock, safe API keys, heartbeats, and honest latency limits.
AppFlowy, Outline, Docmost, BookStack and Obsidian compared on the axes that actually decide it: databases, collaboration, mobile and hosting weight.
The honest hardware ladder for running Stable Diffusion yourself: what a CPU VPS can do, what SDXL needs, ComfyUI install commands, and disk you should budget.
NVMe beats SATA SSD on IOPS and latency, but on a VPS the hypervisor and your neighbours decide what you get. Measure your own with fio.
Zapier and Make bill per task. Self-hosted n8n bills a flat server cost. Work a real month of volume, find the crossover, and read the n8n license.
VPS prices run from about $3 to over $100 a month for specs that read the same. Here is what drives the gap, and what to compare before you buy.
Install FreshRSS on your own Ubuntu VPS with Apache, PHP and MariaDB: the release tarball, virtual host, cron refresh, and the mobile app API.
Your WireGuard tunnel is up but names do not resolve, or the queries leak to the local router. Find which of the three DNS failures you have, and fix it.
SQLite holds transactional application state. DuckDB answers analytics over Parquet and CSV. Why one VPS usually runs both, with a worked example of each.
Bind mounts and named volumes in Docker Compose: which to use for config and for data, the file permission traps, and how to inspect, back up and migrate.
The default project bridge, DNS by service name, when host mode is worth it, sharing one network across projects, and the published port that skips UFW.
How Docker Compose healthchecks are evaluated, why depends_on alone waits for nothing useful, and how to write readiness checks for Postgres and your app.
Three different things get called an env file in Docker Compose. See how .env, env_file and environment differ, which one wins, and where secrets belong.
stop keeps your containers, down removes them and the project network, and neither one deletes a named volume. Only the volumes flag destroys data.
Terminal agent, editor assistant or cloud agent? Compare Claude Code, Cursor, Codex and Copilot by how each one works, what they cost, and where a VPS fits.
Metered API billing or a flat plan? Here is the break-even arithmetic on current per-token rates, and what moves it further than the plan fee does.
Opus 4.8, Sonnet 5 or Haiku 4.5? The July 2026 rates per model, a worked cost comparison on 100,000 jobs, and the settings that move a bill most.
Every turn re-sends your whole context, so a long session slows down and costs more. Read /context, cut the fixed tax, then clear and compact with intent.
Switching models does not restore access. How Claude subscription session and weekly limits differ from API 429 rate limits, and what to do next.
An unattended agent bills every loop with nobody watching. Hard caps, task budgets, prompt caching, batching, and the usage fields that show the spend.
Use Claude to analyze stocks and options with live market data: a free no-key API, three ways to connect it, and copy-paste prompts that get grounded answers.
OpenClaw, Hermes, Dify, OpenHands, and Agent Zero compared: what each agent does best, what it needs, and how to run any of them safely on your own VPS.
Docker publishes container ports with iptables rules that skip UFW, so a denied port still answers the internet. See the mechanism and the fixes that work.
Traefik v3 will not start while swarmMode or pilot is in the static config. Fix the incompatible deprecated static option found error, then migrate rules.
OpenCode is the most starred open source coding agent. Install it on a VPS, run it in tmux as an unprivileged user, and keep its API key locked down.
Claude Code can run any command your user can. What the skip permissions flag changes, and how to contain the blast radius, from sandbox to disposable VPS.
How SSH keys work and how to manage them: one ed25519 key per device, the permissions sshd demands, config Host blocks, and revoking a lost key.
Restic sends encrypted, deduplicated backups from your VPS to another server or object storage, on a nightly timer, with a restore drill that proves it.
Issue a wildcard certificate with Certbot using the DNS challenge. How the TXT record proof works, which plugin to install, and how renewal stays automatic.
Install Docker Engine and Compose v2 on Ubuntu 24.04, write a real two-service compose.yml, dodge the ufw port-publishing trap, and back up volumes.
One command gives Apache a free Let's Encrypt cert on Ubuntu 24.04. Skip snap: apt ships Certbot 2.9.0. Plus the ServerName trap that blocks issuance.
Mint a self-signed TLS cert Chrome actually accepts on Ubuntu 24.04: one openssl command with SAN, nginx/Apache wiring, and trusting it without curl -k.
Run a Paper Minecraft server on an Ubuntu 24.04 VPS: RAM sizing, Java 21, a systemd unit, both firewalls on 25565, safe world backups, and the exact errors.
SSH config, tmux, Ansible, Uptime Kuma, Zabbix and Webmin, ranked by how many servers you have: what each replaces, setup cost in minutes, the one gotcha.
Install Ansible with pipx on Ubuntu 24.04, write an inventory and a first playbook that hardens a fresh VPS, plus fixes for Permission denied and sudo errors.
A 7B model wants 8 GB of RAM and gives 4 to 10 tokens per second on CPU. Host one on a VPS and call it at 127.0.0.1:11434/v1, with port 11434 kept closed.
Hermes needs no GPU: the model runs elsewhere, so a small VPS is plenty. Run it as its own user with ProtectSystem=strict in systemd, and cover IPv6 in UFW.
Use Claude as the brain and your VPS as the body. How the Messages API, tool use, and MCP fit together to build an AI agent you run yourself.
Run Model Context Protocol servers on your own VPS so AI agents get real tools: stdio and remote HTTP transports, systemd, TLS, auth, and every failure mode.
An AI agent is a loop around a language model that can use tools. Learn the concepts behind building one on your own VPS: the loop, tools, MCP, memory.
Self-host a Bitwarden-compatible password manager with Vaultwarden and Docker on a VPS: HTTPS-first, admin token, Fail2ban, tested backups.
A Claude token is about 3.5 characters of text. Here is why one Claude Code turn bills 80,000 of them, and why five idle minutes make the next turn cost 5x.
Run Aider or Goose on a VPS to code from your terminal, connected to a hosted or a self-hosted Ollama model. Setup, model sizing, and safety.
A new VPS is a target from its first minute. This ten-minute runbook creates a user, sets SSH keys, disables root, and turns on the firewall.
FreeBSD 15 is a serious server operating system: ZFS, jails, pf, and one coherent base system. Here is what it does well and where it fits.
Run Jellyfin in Docker on a VPS to stream your own library: block storage, media permissions, direct play vs CPU transcoding, and safe remote access.
OpenClaw runs shell commands and browses the web, so a careless setup is dangerous. Harden it on a VPS: unprivileged user, firewall, secrets, systemd.
OpenHands is an AI agent that writes and runs code, so its setup needs care. Install it on a VPS with Docker and lock down the Web UI and its secrets.
Agent Zero runs code, a browser, and a shell from a Web UI, so exposing it carelessly is dangerous. Set it up on a VPS and lock the Web UI down.
The honest RAM number, port 2283 behind HTTPS, the exit 137 memory kill, and why Immich v3 will not start on a pgvecto.rs database. Restore steps included.
Your UFW rules and cloud firewall may only cover IPv4, leaving services wide open on IPv6. See why it happens on a VPS and how to close the gap.
UFW is the simple way to run a firewall on a VPS. Set a default-deny policy, allow only the ports you need, and turn it on without locking out SSH.
Running a service as root turns one bug into full server access. Give each service its own unprivileged account, or let systemd do it with DynamicUser.
A systemd service keeps your program running: start on boot, restart on crash, log to the journal. How to write one, add a timer, and harden it.
OpenClaw is a personal AI agent that runs commands on your own server. Here is how one is built, piece by piece, and why hardening comes first.
Lock down SSH on your VPS: switch to key-only login, disable root and passwords with a drop-in config, and layer Fail2ban and a VPN on top.
Six containers, so budget 4 GB of RAM. Replace every secret in .env before you boot it, then create the admin account at /install before a stranger does.
Run Google's Gemini CLI on a headless VPS: a current Node, a no-sudo global install, browserless API-key auth, and tmux so long tasks survive SSH drops.
Self-host Rocket.Chat on a VPS with Docker Compose: the single-node MongoDB replica set it requires, TLS, backups, and every failure mode fixed.
A port is how a server sorts incoming traffic to the right service. Learn to read what is listening with ss, and tell a local port from a public one.
A curated list of 25 self-hosted apps worth running in 2026, grouped by job, with what each one replaces, honest RAM and disk needs, and the gotcha to know.
Free, Pro, Max, Team or Enterprise? Match the 2026 tiers to the way you work: which plans include Claude Code, and when Team beats five Pro accounts.
Connect Claude to n8n on your own VPS: an integration guide with credentials, model choice per node, three worked AI workflows, cost math, and common errors.
Install Webmin on Ubuntu 24.04, then lock it down: SSH tunnel or IP allowlist, a real Let's Encrypt cert, two-factor, and Fail2ban on port 10000.
Ubuntu Server 24.04 ships unattended-upgrades, but 20auto-upgrades turns it on. Automatic-Reboot stays false, and a dry run shows what it would install.
Cloudron vs CasaOS vs Coolify on a VPS: install commands, TLS, backups, cost, and resource overhead compared, so you pick the right self-hosting panel.
Run Uptime Kuma in Docker to monitor websites, ports, DNS and cron jobs, alert via email or Telegram, and publish a status page from a separate VPS.
Run n8n on a VPS with Docker Compose, Postgres, and HTTPS behind a reverse proxy: the WEBHOOK_URL and encryption-key traps, plus every error string.
Test outbound port 25 before installing mailcow: a block means mail never leaves the queue. Then set the DNS that stops Gmail's 550 5.7.25 PTR rejection.
On Ubuntu 24.04 a plain apt install already bans SSH brute force. The fail2ban-client status sshd output proves it, plus the fix when Total failed stays at 0.
Install Zabbix 7.0 LTS on Ubuntu 24.04: add the repo, import the MySQL schema, wire up the nginx frontend and agent2, then fix every error the setup throws.
A strictly hypothetical guide to the least efficient datacenter possible: one beloved server, RAID 0, heat as a strategy, and a monitor that watches itself.
A practical comparison of Linux and Windows Server: cost, footprint, remote management, web stacks, Active Directory, and when each is right.
A fair comparison of Linux and FreeBSD as server systems: base design, licensing, packages, ZFS and jails, containers, and where each one wins.
Build a full LAMP stack on Ubuntu 24.04: Apache, MariaDB with unix_socket auth, PHP 8.3 with PHP-FPM, a name-based vhost, and free HTTPS via Certbot.
Get a Claude API key, secure it on Ubuntu 24.04, ship a Python log-explainer with streaming, typed error handling, and real cost control.
Run five apps behind one IP with Traefik v3 on Docker Compose: routing by Host rule, automatic Let's Encrypt TLS, and the acme.json trap that blocks startup.
sudo apt install certbot python3-certbot-nginx, then one certbot --nginx run for a Let's Encrypt cert. Plus apt vs snap and the port 80 renewal timeout.
Run Nextcloud on your own VPS with Docker Compose, Postgres, Redis and a TLS reverse proxy, plus the backup and upgrade steps that keep your data recoverable.
Run Claude Code on an always-on Linux VPS inside tmux so agent sessions survive a dropped SSH connection. Install, harden, and the failure modes to expect.
Set up WireGuard on your own Linux VPS: key generation, wg0.conf, IP forwarding, NAT, AllowedIPs semantics, DNS, and the handshake failures that bite.
Most VPS hosts hide the vmx flag. Check yours with kvm-ok in one minute, then run KVM or Proxmox guests, with the exact error strings you will see.