Exoscale

Alibaba Cloud

Amazon EC2

Digital Ocean

Google Cloud

Hetzner Cloud

Linode

Scaleway

Upcloud

Vultr

Azure Cloud

Oracle Cloud

OVHcloud

Own server

Aruba Cloud

Contabo Cloud

IBM Softlayer

x_test

PayPal

Credit Card

Ethereum

Custom domain

Integrated Features

Server Performance Tuning

Unlimited Deployments

Extended Features

One-hour weekly development support

Cloud to Cloud Migrating

Server Health Monitoring

Security Monitoring

Early access to the new features

Free

Basic

Plus

Individual

Before you apply any of available SSL options you have to go to your registrar website and change domain name DNS &quot;A&quot; record.<div class="content-editor__unstyled"> </div>Learn how to do it at:<div class="content-editor__unstyled"> </div><ul><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://developers.cloudflare.com/registrar/get-started/register-domain/" target="_blank" rel="nofollow">CloudFlare</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://kb.porkbun.com/article/231-how-to-add-dns-records-on-porkbun" target="_blank" rel="nofollow">Porkbun</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://www.godaddy.com/help/change-an-a-record-19239" target="_blank" rel="nofollow">GoDaddy</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://www.namecheap.com/support/knowledgebase/article.aspx/319/2237/how-can-i-set-up-an-a-address-record-for-my-domain" target="_blank" rel="nofollow">Namecheap</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://my.bluehost.com/hosting/help/whats-an-a-record" target="_blank" rel="nofollow">Bluehost</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://www.name.com/support/articles/205188538-Pointing-your-domain-to-hosting-with-A-records" target="_blank" rel="nofollow">Name.com</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://support.cloudways.com/creating-a-record-dreamhost/" target="_blank" rel="nofollow">Dreamhost</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://www.google.com/search?q=change+%22A%22+record&amp;oq=change+%22A%22+record+&amp;aqs=chrome..69i57j0l5.10485j0j7&amp;sourceid=chrome&amp;ie=UTF-8" target="_blank" rel="nofollow">Other domain registrars</a></li></ul><div class="content-editor__unstyled"> </div>An &quot;A&quot; Record (or host name) associates a specific address with a specific IP address (secure.yourdomain.com &gt;&gt; 11.222.333.444). Thus, DNS &quot;A&quot; record should point to your new server IP, see above in Server information.

STEP 1 - Configure DNS

To streamline the SSL certificate installation process, TryDirect offers several options for users:<div class="content-editor__unstyled"> </div><ul><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://www.cloudflare.com/en-gb/application-services/products/ssl/" target="_self">CloudFlare Free Certificates</a> (Preferred): Users can use CloudFlare to obtain free SSL certificates, which is the most preferred method.</li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://try.direct/explains/nginx-proxy-manager" target="_self">Portainer + Nginx Proxy Manager</a> Nginx Proxy Manager is an excellent alternative that seamlessly handles SSL configuration out of the box. However, it does require slight configuration adjustment. This option requires Portainer and Nginx Proxy Manager to be selected in &quot;Applications&quot; section below | <a class="draft-link" href="https://try.direct/explains/nginx-proxy-manager" target="_self">Learn more</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://try.direct/applications/portainer-traefik-integration" target="_self">Deploying Portainer + Traefik</a>: Alternatively, users can opt to use Portainer + Traefik. This option requires Portainer and Traefik to be selected in &quot;Applications&quot; section below. Please note that this method requires technical knowledge of Portainer and Traefik. | <a class="draft-link" href="https://try.direct/applications/portainer-traefik-integration" target="_self">Learn more</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://try.direct/explains/status-panel" target="_self">Status Panel </a>Application (Optional): Additionally, users have the option to include the Status Panel application by TryDirect. The goal of the Status Panel is to facilitate the activation and deactivation of SSL certificates with ease. It also provides visibility into the status of installed services on the server, allowing users to stop or restart services as needed. The &quot;Enable SSL&quot; button will indicate readiness by turning green once the domain is attached to the server. If not, users may need to wait for a couple of minutes.</li></ul><div class="content-editor__unstyled"> </div>Upon successful deployment of the chosen method, users will receive a confirmation email. With SSL enabled, users can securely browse their websites using HTTPS.

STEP 2 - Configure SSL

Dashboard: Monitor and Manage Your Deployments

Pimcore Development

Pimcore Production

GitLab CE

latest

Nginx feature

Deploy WAF/ModSecurity for Nginx compiled with ModSecurity module + predefined OWASP CRS ( ModSecurity Core Rule Set) Version 3

WAF/ModSecurity for Nginx

NginxWAF

stable

knockd is a port-knock server. It listens to all traffic on an ethernet (or PPP) interface, looking for special knock sequences of port-hits. A client makes these port-hits by sending a TCP (or UDP) packet to a port on the server. This port need not be open -- since knockd listens at the link-layer level, it sees all traffic even if it's destined for a closed port. When the server detects a specific sequence of port-hits, it runs a command defined in its configuration file. This can be used to open up holes in a firewall for quick access.

awdawdawd

knockd

Fail2ban scans log files and bans IPs that show the malicious signs. Highly recommended for simple VPS server setup

Learn how to manage this app

Vendor

Fail2ban

Portainer is a lightweight management UI which allows you to easily manage your different Docker environments (Docker hosts or Swarm clusters)

Portainer CE Feature

2.18.4

Nginx Proxy Manager is a user-friendly software application designed to effortlessly route traffic to your websites, whether they're hosted at home or elsewhere. It comes equipped with free SSL capabilities, eliminating the need for extensive Nginx or Letsencrypt knowledge. This tool proves especially handy for simplifying SSL generation and seamlessly proxying your docker containers.

Nginx Proxy Manager

Nginx proxy manager

Real-time performance monitoring, done right!

Netdata positions itself as an alloy of the best features that the paid infrastructure monitoring solutions and open-source tools have. Its multifunctionality, velocity, and ease of use make it secure, reliable, and scalable. This tool enables you effortlessly perform your infrastructure slowdowns and anomalies, troubleshooting, and overall system monitoring with little to no configuration.

Learn more

Netdata self-hosted

Pimcore for development

gitlab_runner_dev

gitlab_runner_master

setup

gitlab_server

WEB server

NGINX - is an HTTP and reverse proxy server, a mail proxy server, and a generic TCP/UDP proxy server

Nginx

Database

MySQL Server, the world's most popular open-source database, and MySQL Cluster, a real-time, open-source transactional database.

MySQL

5.7.44

Pimcore for development - Deployment to Exoscale