Cloud VPS Business
2 vCPU, 4 GB RAM and 80 GB disk on KVM — with 2000 GB of monthly data transfer, snapshots, backups included and a private network of your own. Root access by SSH key from the first boot.
From £12.99/mo
Get startedRAM: 4 GB
Disk: 80 GB
vCPU: 2
Backup: included
Data transfer: 2000 GB / month
Private network: 1
The machine
| Included | |
|---|---|
| RAM | 4 GB |
| Disk | 80 GB |
| vCPU | 2 |
| Backup | included |
| Data transfer | 2000 GB / month |
| Private network | 1 |
| KVM | yes |
| Backups | default snapshots kept 14; default interval minutes daily; restore drills last 14 days 7 |
| Snapshots | yes |
| Private networks | yes |
| Root login with SSH key | yes |
Deploy any of these
Debian 13
Debian 12
Ubuntu 26.04 LTS
Ubuntu 24.04 LTS
Rocky Linux 10
Rocky Linux 9
AlmaLinux 9
Alpine 3.24
P0 — Foundation
- Cargo workspace: control-plane, agent, shared proto crate; CI green on fmt+clippy+test
- Docker dev stack: Postgres 16 + NATS compose file; migrations runner applies schema/000init.sql
- Job queue on SELECT FOR UPDATE SKIP LOCKED; every mutation writes auditlog
- Agent enrolment: bootstrap token -> client cert; NATS subscribe + timer fallback
- Reconciler framework: fetch -> observe -> plan -> validate -> apply -> report; atomic writes; generation rollback
P1 — Web hosting
- Debian tenant image pipeline; shared read-only overlayfs base layer
- Multi-version PHP-FPM 7.4-8.4, pm=ondemand, per-site selection (8.1/8.3 in dev; matrix is a build arg)
- OpenLiteSpeed + lsphp per-site alternative; .htaccess and LSCache verified
- Node and Python app hosting (dev model; in-container unification lands with P1.4)
- Hardening: Landlock+seccomp, hidepid, private /tmp, veth+nftables, outbound port-25 block
P2 — DNS and certificates
- PowerDNS (bind backend
- AXFR enabled and transfer-proven via dig AXFR (secondary topology is deployment config)
- ACME DNS-01, wildcards, renewal scheduler, CAA
- Registrar adapter: NOT kstack scope
- Panel: zone editor, cert status
P3 — Databases
- DB node role: shared MariaDB + PostgreSQL; db, user, grant provisioning; connection limits
- Zero-downtime credential rotation (P3.1)
- Size accounting per cycle, over-quota flagging (never destroy), remote-access CIDR rules (P3.2)
- Wave 1: internal sites migrated onto kstack