The Nxeon Blog
Guides for people who run their own servers.
Straight-talking tutorials and comparisons on VPS hosting, game servers, Linux and security. No fluff, just what actually works. 346 guides from the team that runs the servers.
Search results
25 guides for “hardening” · Clear search
How to Scan a Linux Server for Malware (rkhunter, ClamAV)
Even hardened servers get probed. Learn to scan for rootkits and malware with rkhunter and ClamAV, read the results, and respond to a real detection.
How to Secure Docker Containers
Containers aren't secure by default. Run as non-root, drop capabilities, limit resources, scan images and lock down the daemon on your VPS.
How to Secure a Self-Hosted WordPress Site
WordPress powers a huge share of the web, which makes it a huge target. Harden your self-hosted install at the server, app, and login layers.
How to Secure a MySQL Database
An exposed or default-configured database is a breach waiting to happen. Lock down MySQL/MariaDB: bind to localhost, strong users, least privilege and TLS.
DDoS Protection Basics for a VPS
What a DDoS attack actually is, what you can mitigate at the server level, and where you genuinely need upstream protection. A realistic primer.
How to Disable Root Login on a VPS
The root account is every attacker's first guess. Learn to create a sudo user and disable direct root login over SSH — safely, without locking yourself out.
How to Set Up SSH Key Authentication and Disable Passwords
Stop relying on passwords. Generate an SSH key pair, install your public key on the VPS, and turn password logins off for good.
How to Harden SSH on a Linux VPS
A practical, copy-paste guide to locking down the SSH daemon on your VPS — the single most important service to secure on a public server.
How to Point a Subdomain to a Different App or Port
Run several apps on one VPS, each on its own subdomain — api.yourdomain.com, app.yourdomain.com — using a reverse proxy. DNS plus the Nginx and Caddy configs.
How to Move Your Domain's DNS to Cloudflare
Migrate your DNS to Cloudflare for faster changes, a free CDN and DDoS protection — without downtime. The exact order of steps so no record is dropped.
How to Set Up a CAA Record for Your Domain
A CAA record tells certificate authorities which of them are allowed to issue SSL certs for your domain — a simple, powerful guard against mis-issuance.
How to Self-Host Nextcloud on a VPS
For anyone who wants Dropbox-style file sync without the subscription or the snooping: install Nextcloud on your own VPS with Docker Compose and HTTPS.
Deploy your first server in under a minute.
Creating an account is free and takes no card details. Every guide here runs on a Nxeon VPS or game server.