Skip to content

Cyberfusion Docs

Pick a topic below, or search.

Core

  • UNIX users

    The OS-level account that owns the files, processes and configuration of a project.

  • Virtual hosts

    Serve a domain over HTTP from a directory on disk — Static, PHP or NodeJS.

  • Domain routers

    Per-domain routing: which node serves traffic, which certificate is presented, who's allowed in.

  • FPM pools

    The PHP-FPM process pool that handles PHP requests for a virtual host.

  • Passenger apps

    Phusion Passenger-managed Node.js, Ruby or Python applications.

  • Databases

    MariaDB and PostgreSQL databases on the cluster. Backups, encryption, optimisation.

  • Redis

    In-memory NoSQL store. Main vs additional instances, eviction policies.

  • Backups

    Local-on-master, Borg repositories, and disaster-recovery backups — what you control on each.

  • Crons

    Scheduled commands on a UNIX user. WP-Cron and Laravel Scheduler presets.

  • Custom config snippets

    Reusable bits of nginx or Apache config you can drop into virtual hosts.

  • Firewall rules

    Per-node allow-list rules. Source by IP or group, target by service or HAProxy listen.

  • HAProxy listens

    Expose MariaDB, PostgreSQL, Meilisearch, SingleStore or RabbitMQ on a port or socket.

  • URL redirects

    Send one domain to another. Path and query handling, server aliases, status codes.

  • Basic authentication

    Protect a virtual host (or part of one) with a username and password prompt.

  • security.txt policies

    Tell security researchers how to report a vulnerability. One policy, many domain routers, automatic cluster default.

  • carbon.txt

    Publish your sustainability disclosures and upstream services in a known location auditors and customers can find. One carbon.txt, many domain routers, automatic cluster default.

  • Standards scans

    Continuous open-internet-standards compliance scans of your domains — TLS, DNSSEC, HSTS, IPv6, security.txt, security headers.

  • Let's Encrypt certificates

    Free, automatic SSL certificates: the manager → certificate → domain router pattern.

  • UNIX user namespacing

    What namespacing is, the two effects it has, and the one case to opt out.

  • Bot traffic, nuisance, and DoS attacks

    Where bots hurt the most, what to limit in Core, what Cyberfusion does at the infrastructure level, and the honest limit of any automated defence.

Platform

Mail

  • DNS records for mail

    MX, SPF, DKIM, DMARC, plus auto-configuration records. What each one does and what breaks if you skip it.

  • Set up your mail client

    IMAP, POP3 and SMTP settings, plus step-by-step setup for Thunderbird, iOS Mail, and Outlook desktop.

How-tos