The Nxeon Blog
Guides for people who run their own servers.
Straight-talking tutorials and comparisons on VPS hosting, game servers, Linux and security. No fluff, just what actually works. 346 guides from the team that runs the servers.
Search results
89 guides for “security” · Clear search
How to Protect a VPS from Brute-Force Attacks
Bots relentlessly guess logins against every public server. Here's a layered playbook — keys, firewall, rate limits and bans — to make brute-forcing pointless.
How to Add Two-Factor Authentication to SSH
Add a time-based one-time code on top of your SSH key for defence in depth. Set up Google Authenticator PAM without locking yourself out.
How to Disable Root Login on a VPS
The root account is every attacker's first guess. Learn to create a sudo user and disable direct root login over SSH — safely, without locking yourself out.
How to Set Up a UFW Firewall on Ubuntu
UFW makes Linux firewalling approachable. Learn to allow only the ports you need, set default-deny, rate-limit SSH, and verify your rules.
How to Install and Configure fail2ban
fail2ban watches your logs and automatically bans IPs that fail to log in too many times. Here's how to install it and write custom jails.
How to Set Up SSH Key Authentication and Disable Passwords
Stop relying on passwords. Generate an SSH key pair, install your public key on the VPS, and turn password logins off for good.
How to Harden SSH on a Linux VPS
A practical, copy-paste guide to locking down the SSH daemon on your VPS — the single most important service to secure on a public server.
How to Set Up a Vintage Story Server
Host a Vintage Story server the developer's way (no SteamCMD): download the server package, install .NET, open port 42420, configure the world, and run it as a service.
How to Point a Subdomain to a Different App or Port
Run several apps on one VPS, each on its own subdomain — api.yourdomain.com, app.yourdomain.com — using a reverse proxy. DNS plus the Nginx and Caddy configs.
How to Set Up Business Email on a Custom Domain
Get professional you@yourdomain.com email working, whatever your options — managed provider or self-hosted. The DNS records, the trade-offs, and the setup path.
How to Set Up a CAA Record for Your Domain
A CAA record tells certificate authorities which of them are allowed to issue SSL certs for your domain — a simple, powerful guard against mis-issuance.
How to Enable DNSSEC on Your Domain
DNSSEC cryptographically signs your DNS so answers can't be forged. Here's what it protects against and exactly how to turn it on at your registrar.
Deploy your first server in under a minute.
Creating an account is free and takes no card details. Every guide here runs on a Nxeon VPS or game server.