Amazon EC2

Alibaba Cloud

Digital Ocean

Google Cloud

Hetzner Cloud

Linode

Scaleway

Upcloud

Vultr

Oracle Cloud

OVHcloud

Own server

Aruba Cloud

Azure Cloud

Contabo Cloud

Exoscale

IBM Softlayer

x_test

PayPal

Credit Card

Ethereum

Custom domain

Integrated Features

Server Performance Tuning

Unlimited Deployments

Extended Features

One-hour weekly development support

Cloud to Cloud Migrating

Server Health Monitoring

Security Monitoring

Early access to the new features

Free

Basic

Plus

Individual

Before you apply any of available SSL options you have to go to your registrar website and change domain name DNS &quot;A&quot; record.<div class="content-editor__unstyled"> </div>Learn how to do it at:<div class="content-editor__unstyled"> </div><ul><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://developers.cloudflare.com/registrar/get-started/register-domain/" target="_blank" rel="nofollow">CloudFlare</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://kb.porkbun.com/article/231-how-to-add-dns-records-on-porkbun" target="_blank" rel="nofollow">Porkbun</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://www.godaddy.com/help/change-an-a-record-19239" target="_blank" rel="nofollow">GoDaddy</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://www.namecheap.com/support/knowledgebase/article.aspx/319/2237/how-can-i-set-up-an-a-address-record-for-my-domain" target="_blank" rel="nofollow">Namecheap</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://my.bluehost.com/hosting/help/whats-an-a-record" target="_blank" rel="nofollow">Bluehost</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://www.name.com/support/articles/205188538-Pointing-your-domain-to-hosting-with-A-records" target="_blank" rel="nofollow">Name.com</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://support.cloudways.com/creating-a-record-dreamhost/" target="_blank" rel="nofollow">Dreamhost</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://www.google.com/search?q=change+%22A%22+record&amp;oq=change+%22A%22+record+&amp;aqs=chrome..69i57j0l5.10485j0j7&amp;sourceid=chrome&amp;ie=UTF-8" target="_blank" rel="nofollow">Other domain registrars</a></li></ul><div class="content-editor__unstyled"> </div>An &quot;A&quot; Record (or host name) associates a specific address with a specific IP address (secure.yourdomain.com &gt;&gt; 11.222.333.444). Thus, DNS &quot;A&quot; record should point to your new server IP, see above in Server information.

STEP 1 - Configure DNS

To streamline the SSL certificate installation process, TryDirect offers several options for users:<div class="content-editor__unstyled"> </div><ul><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://www.cloudflare.com/en-gb/application-services/products/ssl/" target="_self">CloudFlare Free Certificates</a> (Preferred): Users can use CloudFlare to obtain free SSL certificates, which is the most preferred method.</li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://try.direct/explains/nginx-proxy-manager" target="_self">Portainer + Nginx Proxy Manager</a> Nginx Proxy Manager is an excellent alternative that seamlessly handles SSL configuration out of the box. However, it does require slight configuration adjustment. This option requires Portainer and Nginx Proxy Manager to be selected in &quot;Applications&quot; section below | <a class="draft-link" href="https://try.direct/explains/nginx-proxy-manager" target="_self">Learn more</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://try.direct/applications/portainer-traefik-integration" target="_self">Deploying Portainer + Traefik</a>: Alternatively, users can opt to use Portainer + Traefik. This option requires Portainer and Traefik to be selected in &quot;Applications&quot; section below. Please note that this method requires technical knowledge of Portainer and Traefik. | <a class="draft-link" href="https://try.direct/applications/portainer-traefik-integration" target="_self">Learn more</a></li><li class="content-editor__unordered-list-item"><a class="draft-link" href="https://try.direct/explains/status-panel" target="_self">Status Panel </a>Application (Optional): Additionally, users have the option to include the Status Panel application by TryDirect. The goal of the Status Panel is to facilitate the activation and deactivation of SSL certificates with ease. It also provides visibility into the status of installed services on the server, allowing users to stop or restart services as needed. The &quot;Enable SSL&quot; button will indicate readiness by turning green once the domain is attached to the server. If not, users may need to wait for a couple of minutes.</li></ul><div class="content-editor__unstyled"> </div>Upon successful deployment of the chosen method, users will receive a confirmation email. With SSL enabled, users can securely browse their websites using HTTPS.

STEP 2 - Configure SSL

Dashboard: Monitor and Manage Your Deployments

If you have one port to expose from application you need  Labels ( enter labels without symbol = ):

- "traefik.enable = true"   // This Label enable traefik for app

- "traefik.docker.network = network name"   // Name of docker network

- "traefik.http.routers.your-app-name.entrypoints = sweb"   // Entrypoint for your app

- "traefik.http.routers.your-app-name.rule = Host(`app.yourdomain.com`)"   // Domain name for your app

If you have several ports to expose from one application you need to create a service and loadbalancer for each port except for common options:

- "traefik.docker.network = network name "

- "traefik.http.routers.service1.entrypoints = sweb"

- "traefik.http.routers.service1.rule = Host(`service1.yourdomain.com)"

- "traefik.http.routers.service1.service = service1"

- "traefik.http.services.service1.loadbalancer.server.port = port"

- "traefik.http.routers.service2.entrypoints = sweb"

- "traefik.http.routers.service2.rule = Host(`service2.yourdomain.com`)"

- "traefik.http.routers.service2.service = service2"

- "traefik.http.services.service2.loadbalancer.server.port = port"

Portainer CE

Portainer

knockd is a port-knock server. It listens to all traffic on an ethernet (or PPP) interface, looking for special knock sequences of port-hits. A client makes these port-hits by sending a TCP (or UDP) packet to a port on the server. This port need not be open -- since knockd listens at the link-layer level, it sees all traffic even if it's destined for a closed port. When the server detects a specific sequence of port-hits, it runs a command defined in its configuration file. This can be used to open up holes in a firewall for quick access.

awdawdawd

knockd

latest

Fail2ban scans log files and bans IPs that show the malicious signs. Highly recommended for simple VPS server setup

Learn how to manage this app

Vendor

Fail2ban

Real-time performance monitoring, done right!

Netdata positions itself as an alloy of the best features that the paid infrastructure monitoring solutions and open-source tools have. Its multifunctionality, velocity, and ease of use make it secure, reliable, and scalable. This tool enables you effortlessly perform your infrastructure slowdowns and anomalies, troubleshooting, and overall system monitoring with little to no configuration.

Portainer + Traefik Integration - Deployment to Amazon EC2