Practical, copy-pasteable guides for deploying and running apps on your own servers.
Step-by-step deployment notes: pick a stack, wire up the server, ship it, and keep it running at 3am.
Mail you host on a VPS can silently stop reaching Outlook.com if your domain has no DMARC record. Set up SPF, DKIM, and DMARC in one sitting, verify with dig, and understand the relaxed vs strict alignment that gets it to pass.…
Read more →A copy-pasteable walkthrough for running a Laravel app on your own VPS - Nginx, PHP-FPM, a database, Composer, .env, queue workers and cron, end to end, with a Docker Compose alternative.…
Read more →pgBadger 13.3 landed on November 3, 2026,[1] and it is one of those quiet maintenance releases that is worth paying attention to if you run PostgreSQL on your own VPS. Why now, specifically? PostgreSQL 19 general availability is planned for November 19, 2026,[4] which gives you a two-week window to do something most people skip before a major upgrade: look at what your current instance is actually doing. The logs PostgreSQL already writes are the highest-signal dataset on your box - no agents, no extra daemon, just the truth about slow queries, errors and disk spills. pgBadger turns that raw log stream into a single self-contained HTML report you can open in a browser. This guide covers the full loop on Debian or Ubuntu: what is new in 13.3, installing it, configuring PostgreSQL to log what pgBadger needs, running reports by hand and by cron, and reading the sections that matter. …
Read more →The Next.js security release is out. Vercel shipped v16.4.5 (Active LTS) and v15.5.29 (Maintenance LTS) on November 3, 2026, closing seven advisories: one high severity and six medium. If you self-host, the patched code only reaches production when you update the dependency, rebuild the standalone artifact, and restart the process. This guide maps all seven advisories to their affected surfaces, calls out the ones that matter most for a self-hosted stack in front of nginx, and walks through the exact update sequence for a standalone build under PM2.…
Read more →Eight eMudhra intermediate CAs had their private keys compromised (CVE-2026-111943). Docker 29.9.2, Go 1.26.10/1.27.3 and the ca-certificates updates from Ubuntu, Red Hat and Debian now reject those certificate chains. This guide shows how to check that your VPS’s git, curl, Docker and Go clients actually stop trusting them - and what the check has to look at before you can call it done.…
Read more →CVE-2026-98432 is a remote, unauthenticated use-after-free in the Linux IPv4 TCP stack (CVSS 9.8). The upstream fix is in stable kernels from 5.10.272 through 7.3, but as of 1 November Ubuntu 22.04–26.10 and RHEL 8/9/10 have not shipped a patched kernel. A fresh uname -r does not mean you are safe - you must check the kernel against your distribution’s CVE status, apply Red Hat’s documented nftables filter in the meantime, and reboot after the update.…
Read more →GitLab CVE-2026-97229 is a CVSS 10.0 pre-auth RCE triggered by a crafted regular expression in a CI/CD config. The fix shipped in GitLab 19.4.2/19.3.5/19.2.8, but the real patch is in Ruby’s Onigmo regex engine - which GitLab applies only to its official packages. Upgrading GitLab on a custom Ruby build or image leaves you vulnerable, exactly as Alpine discovered on its own instance.…
Read more →On 26 Oct 2026 Tailscale confirmed that most reported Tailscale SSH issues are privilege-escalation problems; on 28 Oct the patched client v1.104.4 shipped and the TS-2026-014–017 advisory landed. A peer already allowed into a session could act beyond its user’s permissions - up to root-only Unix sockets. Here is what to check, upgrade and tighten.…
Read more →On 28 October 2026 Node.js 26 becomes Active LTS. It is the last LTS promotion under the old even/odd release model, and the first window where the new annual cadence (v27 Alpha starts the same day) shapes your version choice. v24 moved to Maintenance on 20 October; v22 reaches end-of-life in April 2027. Worst of all, the version to move to - 26.12.1 - is also the one that carries the October HIGH security fixes, including the Node2Shell Brotli RCE. Here’s how to plan the move on a self-hosted VPS, what breaks when you jump from 24/22, and the exact check-install-verify commands.…
Read more →CVE-2026-111497 (Node2Shell) is an out-of-bounds write in Google’s Brotli decoder, rated 9.2 on CVSS 4.0. It reaches any runtime that decodes untrusted Brotli - Node.js 22/24/26, Bun ≤1.4.3, Python brotli/brotlicffi, Envoy and Istio - from either side of an HTTP exchange. Imperva demonstrated unauthenticated remote code execution on the official Node.js 24.22.0 image. Here’s how to check what’s running on your VPS and upgrade safely.…
Read more →