Notes from the
server room.

Engineering deep dives, infrastructure tutorials, and the occasional opinion from the team building a faster way to run servers.

All Posts
WordPress
VPS Setup
SSH & Access
Web Server
Comparisons
k
FEATURED

How to Install a Free Let's Encrypt SSL Certificate

Install a free SSL certificate from Let's Encrypt using Certbot on Ubuntu 24.04. Works with Nginx and Apache, issued and configured in under 10 minutes.

Jun 24, 2026 · 9 min read

Author
ABHILASH
Devops Engineer
Read More
How to Install a Free Let's Encrypt SSL Certificate

Latest articles

The True Cost of Not Having Server Backups

The True Cost of Not Having Server Backups

Quantify the real financial, time, and reputational cost of a server failure without backups — and see how a complete backup strategy costs less than $10/month.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Schedule Automatic Database Backups with Cron

How to Schedule Automatic Database Backups with Cron

Build a production-ready cron-scheduled database backup script for MySQL and MariaDB with rotation, logging, and failure alerting so backups never run silently.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Create a Disaster Recovery Plan for Your Websites

How to Create a Disaster Recovery Plan for Your Websites

A disaster recovery plan turns a server crash from a three-day emergency into a two-hour procedure. Learn how to define RTO/RPO, inventory assets, map failure scenarios, and write runbooks.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Back Up Your Server to Amazon S3

How to Back Up Your Server to Amazon S3

Set up automated server backups to Amazon S3 using AWS CLI, a dedicated IAM user with least-privilege permissions, and a cron-scheduled shell script.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How Often Should You Back Up Your Server?

How Often Should You Back Up Your Server?

The right backup frequency depends on your Recovery Point Objective. WooCommerce stores have different needs than static blogs. Learn recommended schedules by site type.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Restore a Server from a Backup After a Crash

How to Restore a Server from a Backup After a Crash

A step-by-step guide to recovering a web server after a crash: assess the damage, choose the right restore method, restore files and the database, and verify the site is live.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Back Up a MySQL Database from the Command Line

How to Back Up a MySQL Database from the Command Line

Complete guide to mysqldump: single-database and all-databases backups, InnoDB flags, safe credential storage, and restoring from a compressed dump file.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
Local vs Offsite Backups: Why You Need Both

Local vs Offsite Backups: Why You Need Both

Local backups restore in minutes; offsite backups survive infrastructure failures. Learn the 3-2-1 backup rule and why both are required for a resilient backup strategy.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Back Up a WordPress Site Automatically

How to Back Up a WordPress Site Automatically

Server-level WordPress backup automation with cron and mysqldump — covers both database and files, excludes cache directories, and runs independent of WP-Cron.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Automate Server Backups (and Actually Test Restores)

How to Automate Server Backups (and Actually Test Restores)

Automated backups are only half the work. Learn how to schedule reliable offsite backups with cron, S3, and mysqldump — then build a monthly restore test to verify they actually work.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
A Beginner's Guide to Linux Server Security

A Beginner's Guide to Linux Server Security

New to Linux server security? Understand the threat model, the five security layers — access control, firewall, intrusion detection, software hygiene, and backups — plus quick wins for any new server.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Detect and Block Malicious Traffic to Your Server

How to Detect and Block Malicious Traffic to Your Server

Learn to identify malicious IPs in Nginx access logs, block them with UFW, configure Nginx rate limiting, and add Cloudflare DDoS protection to stop attackers at the edge.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Set File and Folder Permissions Correctly on Linux

How to Set File and Folder Permissions Correctly on Linux

Understand Linux file permission bits, use chmod and chown correctly, set the right permissions for web server files, and find dangerous world-writable files hiding on your server.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
The 10 Most Common Server Security Mistakes

The 10 Most Common Server Security Mistakes

From root SSH login to exposed database ports, these ten security mistakes are responsible for the majority of VPS compromises. Find out if you have them and how to fix them.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Audit Open Ports on Your Server

How to Audit Open Ports on Your Server

Audit which ports are open on your server using ss, netstat, and Nmap. Cross-reference with UFW rules to identify services that should not be publicly accessible.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Keep Your Server Patched Automatically

How to Keep Your Server Patched Automatically

Configure unattended-upgrades to apply security patches automatically, set up log monitoring to track what gets updated, and keep kernels current with livepatch for zero-downtime patching.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Disable Root Login on a Linux Server

How to Disable Root Login on a Linux Server

Disabling root SSH login is one of the highest-impact security steps. Create a named sudo user, copy your SSH keys, then disable root access so attackers have no universal target.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Install and Configure Fail2Ban

How to Install and Configure Fail2Ban

Protect your server from brute-force attacks by installing and configuring Fail2Ban. Set up jails for SSH and Nginx, configure ban times, and monitor active bans from the command line.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Set Up a UFW Firewall the Right Way

How to Set Up a UFW Firewall the Right Way

Configure UFW with default-deny policies, allow only needed ports, enable rate limiting on SSH, and audit your ruleset to keep your Linux server secure from unwanted connections.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
Ubuntu 24.04 Server Hardening: The Complete Checklist

Ubuntu 24.04 Server Hardening: The Complete Checklist

Step-by-step security hardening checklist for Ubuntu 24.04: SSH key auth, UFW firewall, Fail2Ban, automatic updates, and additional hardening tweaks to reduce your attack surface.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
SSH vs SFTP vs FTP: What's the Difference?

SSH vs SFTP vs FTP: What's the Difference?

SSH, SFTP, SCP, FTP, and FTPS explained side by side. Learn which protocol to use for remote access, file transfer, and why plain FTP is never safe over the internet.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Use SFTP to Transfer Files Securely

How to Use SFTP to Transfer Files Securely

Use SFTP to upload and download files over SSH. Covers the sftp CLI, GUI clients like FileZilla, SSH key auth, and setting up chrooted SFTP users.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Limit SSH Access by IP Address

How to Limit SSH Access by IP Address

Restrict SSH to known IP addresses using UFW firewall rules, sshd_config AllowUsers, and TCP wrappers to eliminate most brute-force attempts.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Set Up Two-Factor Authentication for SSH

How to Set Up Two-Factor Authentication for SSH

Add TOTP 2FA to SSH using libpam-google-authenticator. Requires both your SSH key and a rotating 6-digit code — even a stolen key is useless without your phone.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Fix "Permission Denied (publickey)" SSH Errors

How to Fix "Permission Denied (publickey)" SSH Errors

Debug and fix SSH publickey errors caused by wrong key files, bad permissions on authorized_keys, or disabled PubkeyAuthentication in sshd_config.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Use SSH Config Files to Manage Multiple Servers

How to Use SSH Config Files to Manage Multiple Servers

SSH config files let you set host aliases, key files, ports, and usernames per server. Connect with a short alias instead of the full ssh command every time.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Set Up SSH Access for Team Members Safely

How to Set Up SSH Access for Team Members Safely

Give each team member their own SSH key and system user, restrict sudo access to required commands, and audit or revoke access when people leave.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Change the Default SSH Port (and Should You?)

How to Change the Default SSH Port (and Should You?)

Moving SSH off port 22 eliminates 90% of automated scan noise. Learn how to change the port, update firewall rules, and understand the real security tradeoffs.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Generate and Use SSH Keys (Mac, Windows, Linux)

How to Generate and Use SSH Keys (Mac, Windows, Linux)

Generate Ed25519 SSH key pairs on any OS, copy them to your server, and manage multiple keys with ssh-agent. Complete guide for all platforms.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Secure SSH with Keys and Disable Password Login

How to Secure SSH with Keys and Disable Password Login

Replace password SSH auth with Ed25519 keys and disable PasswordAuthentication in sshd_config to stop brute-force attacks permanently.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
What Is a TLS Handshake? A Plain-English Explanation

What Is a TLS Handshake? A Plain-English Explanation

Understand the TLS handshake step by step — ClientHello, key exchange, cipher suites, and why TLS 1.3 is faster and more secure than 1.2.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Enable HSTS for Stronger HTTPS Security

How to Enable HSTS for Stronger HTTPS Security

Add the Strict-Transport-Security header in Nginx to enforce HTTPS at the browser level and prevent SSL stripping attacks. Includes safe rollout steps.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Set Up SSL for Multiple Domains on One Server

How to Set Up SSL for Multiple Domains on One Server

Configure SSL for multiple domains on one Nginx server using SNI. Compare separate certs per domain, SAN certificates, and wildcard approaches.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Check When Your SSL Certificate Expires

How to Check When Your SSL Certificate Expires

Check SSL certificate expiry dates using your browser, openssl command, or certbot certificates command. Set up automated email alerts for expiry warnings.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
Free SSL vs Paid SSL: Do You Really Need to Pay?

Free SSL vs Paid SSL: Do You Really Need to Pay?

Compare free SSL (Let's Encrypt, Cloudflare) vs paid DV, OV, and EV certificates. For most websites, free SSL provides identical encryption and browser trust.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Fix "Your Connection Is Not Private" SSL Errors

How to Fix "Your Connection Is Not Private" SSL Errors

Diagnose and fix Chrome's ERR_CERT_DATE_INVALID, ERR_CERT_COMMON_NAME_INVALID, and ERR_CERT_AUTHORITY_INVALID errors with Certbot and Nginx.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Force HTTPS Across Your Entire Website

How to Force HTTPS Across Your Entire Website

Set up a permanent 301 HTTP-to-HTTPS redirect in Nginx or Apache .htaccess. Covers mixed content fixes and WordPress URL updates after the redirect.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Install a Wildcard SSL Certificate

How to Install a Wildcard SSL Certificate

Issue a free wildcard SSL certificate from Let's Encrypt using Certbot and the Cloudflare DNS plugin. One certificate covers all subdomains.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Auto-Renew Let's Encrypt SSL Certificates

How to Auto-Renew Let's Encrypt SSL Certificates

Configure Certbot's systemd timer for automatic SSL renewal on Ubuntu. Includes deploy hooks to reload Nginx after renewal and monitoring strategies.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
Nginx vs Apache: Which Web Server Should You Use?

Nginx vs Apache: Which Web Server Should You Use?

Compare Nginx and Apache on architecture, memory usage, WordPress performance, and configuration style to pick the right one.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Set Up Nginx Server Blocks (Virtual Hosts)

How to Set Up Nginx Server Blocks (Virtual Hosts)

Create and enable Nginx server blocks to host multiple domains on one server, with per-site logs and PHP-FPM configuration.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Enable Gzip and Brotli Compression in Nginx

How to Enable Gzip and Brotli Compression in Nginx

Reduce response sizes by 60-80% with Gzip and Brotli compression in Nginx. Full config walkthrough with verification commands.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Configure Nginx as a Reverse Proxy

How to Configure Nginx as a Reverse Proxy

Set up Nginx as a reverse proxy for Node.js, Python, and other backends. Covers proxy headers, SSL termination, and load balancing.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Set Up HTTP/2 and HTTP/3 on Your Server

How to Set Up HTTP/2 and HTTP/3 on Your Server

Enable HTTP/2 multiplexing and HTTP/3 QUIC on Nginx for faster page loads. Covers SSL requirements, Alt-Svc headers, and protocol verification.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Redirect HTTP to HTTPS in Nginx

How to Redirect HTTP to HTTPS in Nginx

Force HTTPS on all traffic with permanent 301 redirects in Nginx. Covers www canonicalization, common pitfalls, and verification.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Increase Upload File Size Limits in Nginx and PHP

How to Increase Upload File Size Limits in Nginx and PHP

Fix 413 errors by updating client_max_body_size in Nginx and upload limits in PHP. Required for WordPress media uploads and form submissions.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Configure Nginx Rate Limiting to Block Abuse

How to Configure Nginx Rate Limiting to Block Abuse

Protect your server from brute-force attacks and scrapers with Nginx rate limiting. Set up limit_req_zone, burst allowances, and IP whitelisting.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
Common Nginx Configuration Mistakes (and How to Avoid Them)

Common Nginx Configuration Mistakes (and How to Avoid Them)

Avoid 8 common Nginx config errors that cause security holes, performance issues, and unexpected behavior in production.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Install WordPress on a VPS (Step-by-Step)

How to Install WordPress on a VPS (Step-by-Step)

A complete manual installation walkthrough — database, Nginx server block, PHP-FPM, and Let's Encrypt SSL on Ubuntu 24.04.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Deploy WordPress on a VPS Without cPanel

How to Deploy WordPress on a VPS Without cPanel

Skip cPanel's $30+/month license. Deploy WordPress with Nginx, PHP-FPM, and a lightweight panel for a fraction of the cost.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
Choosing the Best Server Stack for WordPress

Choosing the Best Server Stack for WordPress

LEMP, LAMP, or OpenLiteSpeed? PHP-FPM tuning, OPcache configuration, and MySQL InnoDB settings for production WordPress.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Point a Domain to Your WordPress Server

How to Point a Domain to Your WordPress Server

Set up DNS A records, configure Nginx virtual hosts for your domain, and enable SSL — complete domain-to-VPS connection guide.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Set Up a New WordPress Site in Under 10 Minutes

How to Set Up a New WordPress Site in Under 10 Minutes

The fastest path from an empty VPS to a live, SSL-secured WordPress site — using CloudStick's one-click installer.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
Managed vs Self-Managed WordPress Hosting

Managed vs Self-Managed WordPress Hosting

WP Engine, Kinsta, or your own VPS with CloudStick? An honest cost and performance comparison for agencies and developers.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How Much RAM Does a WordPress Site Really Need?

How Much RAM Does a WordPress Site Really Need?

PHP-FPM worker math and VPS sizing for every WordPress site type — from brochure sites to high-traffic WooCommerce stores.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Host Multiple WordPress Sites on One Server

How to Host Multiple WordPress Sites on One Server

Nginx virtual hosts, isolated PHP-FPM pools, and per-site databases — the secure way to run multiple WordPress sites on one VPS.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
WordPress Multisite vs Separate Installs

WordPress Multisite vs Separate Installs

When to use WordPress Multisite and when separate installs on the same server are the better architecture choice.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Set Up a Production-Ready VPS: The Complete 2026 Guide

How to Set Up a Production-Ready VPS: The Complete 2026 Guide

Provision and harden a cloud VPS from scratch on Ubuntu 24.04 — SSH key auth, UFW firewall, swap space, and one-click management with CloudStick.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
Initial Server Setup on Ubuntu 24.04: A Step-by-Step Checklist

Initial Server Setup on Ubuntu 24.04: A Step-by-Step Checklist

A practical checklist for new Ubuntu 24.04 servers: sudo users, SSH hardening, UFW firewall, automatic security updates, and NTP time sync.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Choose the Right VPS Size for Your Website

How to Choose the Right VPS Size for Your Website

RAM, vCPU, and storage sizing for WordPress, WooCommerce, and Node.js apps — with concrete recommendations by traffic tier and workload type.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Connect to Your VPS for the First Time

How to Connect to Your VPS for the First Time

Generate SSH keys, connect to a VPS over SSH, disable password auth, and set up SSH config aliases for faster access from any machine.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Create and Manage Sudo Users on a Linux Server

How to Create and Manage Sudo Users on a Linux Server

Add sudo users with adduser and usermod, restrict commands in the sudoers file, audit privilege usage, and manage team access with CloudStick.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
Setting Up Swap Space on a VPS for Better Stability

Setting Up Swap Space on a VPS for Better Stability

Create a swap file on Ubuntu 24.04, tune vm.swappiness, persist configuration across reboots, and monitor memory usage to prevent OOM crashes.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Set Your Server Timezone, Hostname, and Locale

How to Set Your Server Timezone, Hostname, and Locale

Configure server timezone with timedatectl, change the hostname permanently with hostnamectl, and fix locale warnings on Ubuntu 24.04.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
Updating and Upgrading a Linux Server Safely

Updating and Upgrading a Linux Server Safely

The safe workflow for apt update and apt upgrade on Ubuntu 24.04: staging patches, enabling unattended security updates, and handling kernel upgrades.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
How to Install a LEMP Stack on Ubuntu 24.04

How to Install a LEMP Stack on Ubuntu 24.04

Install Nginx, MySQL 8.0, and PHP 8.3-FPM on Ubuntu 24.04. Configure Nginx server blocks, PHP pools, and test your stack end to end.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read
VPS vs Shared Hosting: When to Make the Move

VPS vs Shared Hosting: When to Make the Move

The real differences between VPS and shared hosting in performance, control, and cost — plus the five signals that mean you've outgrown shared.

Author
ABHILASH
Devops Engineer
May 12, 2026 · 12 min read

We use cookies to improve your experience

CloudStick uses cookies to personalise content, analyse traffic and keep you signed in. Cookie Policy · Terms of Service

Manage cookies