Deploy common stacks on a VPS

Secure a VPS, install runtimes, run applications, and expose them through a reverse proxy.

VPS Hosting provides server-level control. The customer is responsible for security and maintenance unless a managed agreement states otherwise.

Retrieve the credentials from the protected service page and redact them in documentation screenshots.

Connect through SSH

ssh root@SERVER_IP

A successful SSH session should show only non-sensitive system information.

Initial security

apt update
apt upgrade -y
adduser deploy
usermod -aG sudo deploy

Add an SSH public key for the non-root user, confirm key login, then reduce password and root-login exposure according to the server policy.

Node.js with PM2

apt install -y git nginx
# Install a supported Node.js release using your chosen package source.
git clone YOUR_REPOSITORY_URL /var/www/application
cd /var/www/application
npm ci
npm run build
npm install --global pm2
pm2 start npm --name application -- start
pm2 save

Configure Nginx as a reverse proxy to the local application port and obtain HTTPS after DNS points to the server.

Docker Compose

Install Docker from its official repository, deploy a reviewed Compose file, store secrets outside source control, and configure restart policies and backups.

Maintenance checklist

• Apply operating-system updates.
• Back up application data and databases.
• Monitor disk, memory, load, and certificate renewal.
• Restrict firewall ports.
• Rotate credentials after team changes.