Cyberfusion Docs
Pick a topic below, or search.
Core
-
The OS-level account that owns the files, processes and configuration of a project.
-
Serve a domain over HTTP from a directory on disk — Static, PHP or NodeJS.
-
Per-domain routing: which node serves traffic, which certificate is presented, who's allowed in.
-
The PHP-FPM process pool that handles PHP requests for a virtual host.
-
Phusion Passenger-managed Node.js, Ruby or Python applications.
-
MariaDB and PostgreSQL databases on the cluster. Backups, encryption, optimisation.
-
In-memory NoSQL store. Main vs additional instances, eviction policies.
-
Local-on-master, Borg repositories, and disaster-recovery backups — what you control on each.
-
Scheduled commands on a UNIX user. WP-Cron and Laravel Scheduler presets.
-
Reusable bits of nginx or Apache config you can drop into virtual hosts.
-
Per-node allow-list rules. Source by IP or group, target by service or HAProxy listen.
-
Expose MariaDB, PostgreSQL, Meilisearch, SingleStore or RabbitMQ on a port or socket.
-
Send one domain to another. Path and query handling, server aliases, status codes.
-
Protect a virtual host (or part of one) with a username and password prompt.
-
Tell security researchers how to report a vulnerability. One policy, many domain routers, automatic cluster default.
-
Publish your sustainability disclosures and upstream services in a known location auditors and customers can find. One carbon.txt, many domain routers, automatic cluster default.
-
Continuous open-internet-standards compliance scans of your domains — TLS, DNSSEC, HSTS, IPv6, security.txt, security headers.
-
Free, automatic SSL certificates: the manager → certificate → domain router pattern.
-
What namespacing is, the two effects it has, and the one case to opt out.
-
Bot traffic, nuisance, and DoS attacks
Where bots hurt the most, what to limit in Core, what Cyberfusion does at the infrastructure level, and the honest limit of any automated defence.
Platform
-
Commercial SSL certificates: DNS vs email validation, approver email, EV vs DV, renewal cadence.
-
Domain registration and transfer durations
Why durations vary, prerequisites that determine speed, gTLD vs ccTLD differences.
-
Configure where notifications are sent, and to whom. Email, platform, Slack channels.
-
Send Cyberfusion notifications to a Slack channel of your choice.
-
I can't log in to the platform
Options for regaining access if you've lost your login credentials.
-
MX, SPF, DKIM, DMARC, plus auto-configuration records. What each one does and what breaks if you skip it.
-
IMAP, POP3 and SMTP settings, plus step-by-step setup for Thunderbird, iOS Mail, and Outlook desktop.
How-tos
-
Per cluster, per FPM pool, or per document root via
.user.ini. -
The three pieces — htpasswd file, htpasswd users, realm — in the order to create them.
-
Web-accessible via Passenger, or background-only as a daemon. Prerequisites and the path to take for each.
-
Subdirectory, subdomain (wildcard alias), or domain mapping — and the SSL caveat for wildcards.
-
Change or disable a UNIX user's password
Set a new SSH/SFTP password, or turn off password login entirely to force key-only access.
-
Enable Puppeteer support on the cluster and install Puppeteer in your project.
-
Enable PHP performance monitoring with Tideways on an FPM pool. Free workshop and paid help.
-
Add a node group (such as Puppeteer or Node.js) to a node.
-
Moving email to Cyberfusion and want to bring your contacts over.
-
Bounce emails for addresses I don't know
Where 'Undeliverable' bounces from your own site come from, and how to stop them landing in your real inbox.
-
nginx error: 'upstream sent too big header'
Some pages return a 502 while others load fine. PHP-FPM's response headers don't fit in nginx's FastCGI header buffer. Raise it via the virtual host's custom config.