教程

docker linux nginx security networking self-hosting web-server reverse-proxy vps debian ubuntu firewall virtual-hosts bgp rpki bird2 frrouting vyos anycast ssh fail2ban n8n docker-compose postgresql workflow-automation ssl tls lets-encrypt certbot https tmux terminal vps-administration claude-code ai-tools ripe-ncc ufw iptables gnu-screen terminal-multiplexer screen-session webhooks self-hosted proxy-pass websocket ollama ai-agents mcp sshd-config ed25519 rootless-docker seccomp apparmor containers openclaw hermes-agent routing ipv6 systemd frr typescript nodejs roa routinator ai-agent telegram vim text-editor server-administration aiops observability monitoring signoz grafana langfuse prometheus ip-transit production logging disk-management openobserve opentelemetry datadog-alternative gdpr nftables loki promtail logql claude ai-workflows langchain backup mysql s3 rclone cron python log-analysis discord slack disaster-recovery traefik caddy wireguard tailscale vpn headscale alertmanager self-healing performance zero-downtime github-actions ai-code-review gemini ci-cd rate-limiting ddos-protection bind9 dns high-availability privacy vaultwarden password-manager bgpalerter plakar encryption deduplication immich photo-management google-photos-alternative replication offsite-backup paperless-ngx document-management ocr gitea git plausible analytics clickhouse uptime-kuma beszel hardening failover multihoming bfd llm-observability deepeval windows-server veeam migration bare-metal-restore virtio p2v

vps production containers

Docker Compose资源限制、健康检查与重启策略

你的Compose文件在开发环境能跑，但还没有达到生产标准。学习如何添加内存/CPU限制、健康检查、重启策略和启动顺序，保护你的VPS免受OOM kill和级联故障的影响。

3 分钟阅读阅读 →

vps containers apparmor

Docker安全加固：VPS上的Rootless模式、Seccomp和AppArmor

VPS上Docker的七层加固措施。每节说明威胁来源，给出CLI和Compose语法的修复方案，并验证其效果。

4 分钟阅读阅读 →

containers traefik zero-downtime

Docker更新策略：VPS上的零停机容器更新

四种递进式方法更新VPS上的Docker容器，从简单的拉取替换到使用Traefik的零停机蓝绿部署。涵盖镜像固定、回滚操作、Diun通知和docker-rollout。

2 分钟阅读阅读 →