Skip to content

Cyberfusion Docs

Start with All about projects. A project is one website or application, and it's the page you'll spend most of your time on. Everything else here is either a task you'll do to a project, or one of the parts a project is built from.

Or search, if you already know what you're after.

Core

Start here

  • Projects

    One project is one website or application. What the templates set up for you, what's on the project page, and how to import one that already exists.

  • Staging environments and cloning

    A second copy to break safely, and what 'Clone' does and doesn't copy over to production.

  • Let's Encrypt certificates

    Free, automatic HTTPS. How it's issued and renewed, and what to check when a certificate doesn't appear.

  • Run a Node.js application

    Web-accessible via Passenger, or background-only as a daemon.

  • Set up a WordPress multisite

    Subdirectory, subdomain (wildcard alias), or domain mapping, plus the SSL caveat for wildcards.

Run it day to day

  • Crons

    Scheduled commands. WP-Cron and Laravel Scheduler presets, and what the failure emails mean.

  • Backups

    Three backup tracks and what you control on each. Which one to reach for when you need a restore.

  • Databases

    MariaDB and PostgreSQL. Backups, encryption at rest, weekly optimisation.

  • Change or disable a UNIX user's password

    Rotate the SSH and SFTP password, or turn it off so only keys work.

  • Set up basic authentication

    Put a username and password prompt in front of a site, or one path inside it.

When something goes wrong

Tune and scale

  • FPM pools

    The PHP process pool. Sizing for peak, memory and CPU caps, slow-request logging, restart vs reload.

  • Passenger apps

    Node.js, Ruby or Python applications. App root, environment variables, sizing.

  • Change PHP settings

    Per cluster, per FPM pool, or per document root via .user.ini.

  • Redis

    In-memory store for caches, sessions and queues. The eviction policy to pick, and the one that loses jobs.

  • PHP performance monitoring with Tideways

    Find out which requests and queries are slow. Enabling it, the free workshop, and paid help.

  • Custom config snippets

    Reusable nginx or Apache config, with the ordering rule that decides which setting wins.

  • Install Puppeteer

    Enable Puppeteer support on the cluster and install it in your project.

Security and compliance

  • Security and auditing

    What's encrypted at rest, what a node records on SSH login, the logs Core keeps of every change, and restricting API access by IP.

  • Standards scans

    Automatic compliance scans of your domains against the open internet standards, and why tenders ask for them.

  • security.txt policies

    Tell security researchers how to report a vulnerability. One policy, many domains.

  • carbon.txt

    Publish your sustainability disclosures and upstream services where auditors and customers can find them.

  • Basic authentication

    The concepts behind the password prompt: htpasswd file, htpasswd users, realm, and the Apache vs nginx scoping difference.

Under the hood

The objects a project is built from. Reach for these when you need to change one specific part, or when a setup doesn't fit the project model.

  • UNIX users

    The account that owns the files and processes of one environment. Daemons, usage tracking, malware scanning.

  • Virtual hosts

    Serve a domain from a directory on disk. Language choice, and the automatic FPM pool reload on deploys.

  • Domain routers

    Per-domain routing: which node serves traffic, which certificate is presented, who's allowed in.

  • UNIX user namespacing

    Why your chosen PHP version is always the one that runs, why sudo doesn't work, and the one reason to opt out.

  • URL redirects

    Send one domain to another. Path and query handling, server aliases, status codes.

  • Firewall rules

    Per-node allow-list rules. Source by IP or group, target by service, port or HAProxy listen.

  • HAProxy listens

    Expose MariaDB, PostgreSQL, Meilisearch, SingleStore or RabbitMQ on a port or socket.

  • Run a custom internet-facing service

    A websocket server, MQTT broker or custom API, supervised as a daemon and opened up to the internet.

  • Add a node group

    Add a node group, such as Puppeteer or Node.js, to a node.

Mail

Platform