Cloud VPS Pro — 4 vCPU, 8 GB RAM, 160 GB disk
A KVM virtual machine with room to grow: 4 dedicated vCPU, 8 GB RAM and 160 GB of storage, plus 4000 GB of monthly data transfer. Backups are included with daily snapshots kept for 14 days, one private network links your machines, and root access is yours from the first boot with SSH key login. From £24.99/mo.
From £24.99/mo
Get startedRAM: 8 GB
Disk: 160 GB
vCPU: 4
Backup: included
Data transfer: 4000 GB / month
Private network: 1
The machine
| Included | |
|---|---|
| RAM | 8 GB |
| Disk | 160 GB |
| vCPU | 4 |
| Backup | included |
| Data transfer | 4000 GB / month |
| Private network | 1 |
| KVM | yes |
| Backups | default snapshots kept 14; default interval minutes daily; restore drills last 14 days 7 |
| Snapshots | yes |
| Private networks | yes |
| Root login with SSH key | yes |
Deploy any of these
Debian 13
Debian 12
Ubuntu 26.04 LTS
Ubuntu 24.04 LTS
Rocky Linux 10
Rocky Linux 9
AlmaLinux 9
Alpine 3.24
P0 — Foundation
- Cargo workspace: control-plane, agent, shared proto crate; CI green on fmt+clippy+test
- Docker dev stack: Postgres 16 + NATS compose file; migrations runner applies schema/000init.sql
- Job queue on SELECT FOR UPDATE SKIP LOCKED; every mutation writes auditlog
- Agent enrolment: bootstrap token -> client cert; NATS subscribe + timer fallback
- Reconciler framework: fetch -> observe -> plan -> validate -> apply -> report; atomic writes; generation rollback
P1 — Web hosting
- Debian tenant image pipeline; shared read-only overlayfs base layer
- Multi-version PHP-FPM 7.4-8.4, pm=ondemand, per-site selection (8.1/8.3 in dev; matrix is a build arg)
- OpenLiteSpeed + lsphp per-site alternative; .htaccess and LSCache verified
- Node and Python app hosting (dev model; in-container unification lands with P1.4)
- Hardening: Landlock+seccomp, hidepid, private /tmp, veth+nftables, outbound port-25 block
P2 — DNS and certificates
- PowerDNS (bind backend
- AXFR enabled and transfer-proven via dig AXFR (secondary topology is deployment config)
- ACME DNS-01, wildcards, renewal scheduler, CAA
- Registrar adapter: NOT kstack scope
- Panel: zone editor, cert status
P3 — Databases
- DB node role: shared MariaDB + PostgreSQL; db, user, grant provisioning; connection limits
- Zero-downtime credential rotation (P3.1)
- Size accounting per cycle, over-quota flagging (never destroy), remote-access CIDR rules (P3.2)
- Wave 1: internal sites migrated onto kstack