RDP.sh Blog
Caddy Reverse-Proxy Patterns That Actually Work in Production
Practical Caddy reverse-proxy patterns for VPS production: install from APT, auto-HTTPS, Docker upstream, multi-site, wildcard DNS challenge, and reload.
Self-Host Jellyfin on a VPS for Private Media Streaming
Run your own private Netflix with Jellyfin on a VPS. Step-by-step Docker setup with Caddy reverse proxy, WebSocket support, hardware notes, and VPN tips.
Set Up a WireGuard VPN on a VPS in 10 Minutes
Run your own WireGuard VPN on a VPS so you can route devices through it, reach private services on the server, or build a small mesh between hosts.
Self-Host Plausible Analytics on a VPS for Privacy-First Metrics
Run Plausible Analytics Community Edition on your VPS with Docker, ClickHouse, Postgres, and Caddy. Cookie-free, GDPR-friendly metrics in 20 minutes.
Encrypted VPS Backups to S3 with Restic
Set up encrypted, deduplicated VPS backups to S3, B2, MinIO, or Wasabi using Restic. Includes a backup script, systemd timer, retention, and a healthcheck ping.
Self-Host Forgejo on a VPS for a Private Git Server
Run your own private Git server on a VPS with Forgejo, Postgres, Docker, and Caddy. Full setup with auto HTTPS, SSH access, admin lockdown, and backups.
Access Your VPS Privately with Tailscale (RDP + SSH)
Set up Tailscale on your VPS and laptop so you can use RDP or SSH over a private network and stop exposing management ports to the public internet.
Harden SSH on a VPS with Fail2Ban and Key-Only Auth
Lock down SSH on a Linux VPS with ed25519 keys, Fail2Ban, UFW, and optional TOTP 2FA. A practical Ubuntu 22.04 / 24.04 hardening walkthrough.
Secure Windows RDP - Hardening Checklist
Lock down a Windows VPS running RDP with NLA, firewall scoping, VPN access, account lockout, and a few simple sanity checks.