VPS know-how & server operations
Tutorials, optimization and server operations for developers and sysadmins. Practical, concise, and well-sourced.

How the wp2shell WordPress Core Flaw Lets Attackers Run Code Unauthenticated
Technical analysis of the wp2shell vulnerability (CVE-2026-XXXX): how an unauthenticated attacker achieves remote code execution via WordPress core, and how to patch or mitigate it on your VPS.

Hardening a self-hosted VPN server: firewall, key rotation and what to log
A step-by-step guide to securing a self-hosted VPN server with nftables, SSH hardening, fail2ban, key rotation, and a deliberate logging policy. Built for cross-border teams between China and Vietnam.

Security audit and hardening with Lynis on a VPS
Run a full Lynis security audit on your Linux VPS to find vulnerabilities, harden the system, and apply professional pentest-level fixes.

Encrypt a VPS disk with LUKS on Ubuntu 24.04
Learn how to encrypt a VPS root disk with LUKS on Ubuntu 24.04. Full step-by-step guide including cryptsetup, boot setup, and verify commands for sysadmins.

Hardening SSH on a New VPS: Keys, Ports, fail2ban, and CrowdSec
A layered SSH hardening walkthrough for a fresh VPS: key-only auth, disabling root, a non-default port, and fail2ban or CrowdSec.

Set Up a WireGuard VPN on Your VPS in 10 Minutes
A step-by-step guide to a working WireGuard tunnel on your VPS: keys, server and client config, NAT, firewall, and a mobile QR code.

WireGuard, OpenVPN or an SSH tunnel: picking a VPN setup for a small team
A technical comparison of WireGuard vs OpenVPN vs SSH tunnel for VPS use. Throughput, CPU cost, mobile battery, client availability, key rotation. Recommendations per use case.

Set up your own WireGuard VPN on a Vietnam VPS: a full walkthrough
Set up a self-hosted WireGuard VPN on a Vietnam VPS for your cross-border team. Full walkthrough with Ubuntu 24.04 commands, key generation, and nftables NAT.

Decree 53 vs Decree 13: cybersecurity storage vs personal data protection
A clear comparison of Vietnam's Decree 53 on cybersecurity data storage and Decree 13 on personal data protection (PDPD). Know which applies to your VPS or business operations in Vietnam.

Data Localization in Vietnam: What Foreign SaaS Companies Actually Need to Do
A practical guide for foreign SaaS companies: assess if Decree 53 applies, set up a compliant VPS in Vietnam, and meet the 24-month data retention requirement without building a local data center.

Does Decree 53 require my company to host data in Vietnam?
This article breaks down Decree 53/2022/ND-CP’s data localization rules in plain terms: who must comply, what data is affected, and how to stay legal while renting a VPS in Vietnam.