Lock down a Droplet with Tailscale and private SSH
Lock down a Droplet with Tailscale, close public SSH, test access rules, and keep a recovery route. Follow the guide before adding private server applications.
All guides
Self-hosting
Run private services with access controls, monitoring, and a recovery plan.
10 guides
Host a private Home Assistant server with Tailscale
Host a private Home Assistant server on a Droplet with Tailscale HTTPS, no public dashboard ports, backups, and clear limits for devices on your home LAN.
Run CI builds on disposable Droplets
Give one trusted GitHub Actions job a fresh Linux machine, keep its artifact, and confirm the Droplet disappears. Includes cleanup workflows and tests.
Build your own OBS multistream server for Twitch and YouTube
Upload once from OBS and let a private relay send the stream to each platform. Includes Docker Compose, an encrypted connection, costs, and a rehearsal checklist.
Back Up a Docker Compose App and Test the Restore
A server snapshot can get a machine back. This guide keeps the application data, Compose files, and database dump you need to prove the app can return.
Run a Private, Always-On OpenClaw Assistant
An always-on assistant needs more than a server. Start with a fresh OpenClaw Droplet, protect the gateway, prove one private workflow, then grow from there.
Self-Host a Private Stoat Chat Server
A short, safe path for running Stoat on a new Ubuntu Droplet. It hardens SSH, installs the official stack, and stops for you to check each real boundary.
Migrate n8n from SQLite to PostgreSQL on DigitalOcean
Changing one database setting is not a migration. Keep a verified recovery point, move the app data, and prove the new database before you retire the old one.
Monitor a Website with Uptime Kuma
A monitor on the same server as your app can disappear with the problem. Put Uptime Kuma elsewhere, then test the alert with a controlled failure.
Run a Private n8n Server and Test the Restore
A workflow server needs to survive a bad update or a lost Droplet. Keep its credentials, execution history, and configuration in an encrypted backup, then restore it somewhere safe.