Cloud VPS Starter — a real KVM server from £5.99/mo
1 vCPU, 1 GB RAM and 25 GB of disk, with 1000 GB of monthly transfer. Full root access over SSH key, snapshots and backups included, plus private networking when you're ready to grow.
From £5.99/mo
Get startedRAM: 1 GB
Disk: 25 GB
vCPU: 1
Backup: included
Data transfer: 1000 GB / month
KVM
The machine
| Included | |
|---|---|
| RAM | 1 GB |
| Disk | 25 GB |
| vCPU | 1 |
| Backup | included |
| Data transfer | 1000 GB / month |
| KVM | yes |
| Backups | default snapshots kept 14; default interval minutes daily; restore drills last 14 days 7 |
| Snapshots | yes |
| Private networks | yes |
| Root login with SSH key | yes |
Deploy any of these
Debian 13
Debian 12
Ubuntu 26.04 LTS
Ubuntu 24.04 LTS
Rocky Linux 10
Rocky Linux 9
AlmaLinux 9
Alpine 3.24
P0 — Foundation
- Cargo workspace: control-plane, agent, shared proto crate; CI green on fmt+clippy+test
- Docker dev stack: Postgres 16 + NATS compose file; migrations runner applies schema/000init.sql
- Job queue on SELECT FOR UPDATE SKIP LOCKED; every mutation writes auditlog
- Agent enrolment: bootstrap token -> client cert; NATS subscribe + timer fallback
- Reconciler framework: fetch -> observe -> plan -> validate -> apply -> report; atomic writes; generation rollback
P1 — Web hosting
- Debian tenant image pipeline; shared read-only overlayfs base layer
- Multi-version PHP-FPM 7.4-8.4, pm=ondemand, per-site selection (8.1/8.3 in dev; matrix is a build arg)
- OpenLiteSpeed + lsphp per-site alternative; .htaccess and LSCache verified
- Node and Python app hosting (dev model; in-container unification lands with P1.4)
- Hardening: Landlock+seccomp, hidepid, private /tmp, veth+nftables, outbound port-25 block
P2 — DNS and certificates
- PowerDNS (bind backend
- AXFR enabled and transfer-proven via dig AXFR (secondary topology is deployment config)
- ACME DNS-01, wildcards, renewal scheduler, CAA
- Registrar adapter: NOT kstack scope
- Panel: zone editor, cert status
P3 — Databases
- DB node role: shared MariaDB + PostgreSQL; db, user, grant provisioning; connection limits
- Zero-downtime credential rotation (P3.1)
- Size accounting per cycle, over-quota flagging (never destroy), remote-access CIDR rules (P3.2)
- Wave 1: internal sites migrated onto kstack