Cyberfusion Docs
Start with All about projects. A project is one website or application, and it's the page you'll spend most of your time on. Everything else here is either a task you'll do to a project, or one of the parts a project is built from.
Or search, if you already know what you're after.
Core
Start here
-
One project is one website or application. What the templates set up for you, what's on the project page, and how to import one that already exists.
-
Staging environments and cloning
A second copy to break safely, and what 'Clone' does and doesn't copy over to production.
-
Free, automatic HTTPS. How it's issued and renewed, and what to check when a certificate doesn't appear.
-
Web-accessible via Passenger, or background-only as a daemon.
-
Subdirectory, subdomain (wildcard alias), or domain mapping, plus the SSL caveat for wildcards.
Run it day to day
-
Scheduled commands. WP-Cron and Laravel Scheduler presets, and what the failure emails mean.
-
Three backup tracks and what you control on each. Which one to reach for when you need a restore.
-
MariaDB and PostgreSQL. Backups, encryption at rest, weekly optimisation.
-
Change or disable a UNIX user's password
Rotate the SSH and SFTP password, or turn it off so only keys work.
-
Put a username and password prompt in front of a site, or one path inside it.
When something goes wrong
-
File permissions keep reverting after a hack
You set a file to 644 and seconds later it's 444 again. A malicious PHP worker is still running.
-
nginx error: 'upstream sent too big header'
Some pages return a 502 while others load fine. PHP-FPM's response headers don't fit in nginx's buffer.
-
Where bots hurt most, what to limit, what Cyberfusion already blocks, and the honest limit of any automated defence.
Tune and scale
-
The PHP process pool. Sizing for peak, memory and CPU caps, slow-request logging, restart vs reload.
-
Node.js, Ruby or Python applications. App root, environment variables, sizing.
-
Per cluster, per FPM pool, or per document root via
.user.ini. -
In-memory store for caches, sessions and queues. The eviction policy to pick, and the one that loses jobs.
-
PHP performance monitoring with Tideways
Find out which requests and queries are slow. Enabling it, the free workshop, and paid help.
-
Reusable nginx or Apache config, with the ordering rule that decides which setting wins.
-
Enable Puppeteer support on the cluster and install it in your project.
Security and compliance
-
What's encrypted at rest, what a node records on SSH login, the logs Core keeps of every change, and restricting API access by IP.
-
Automatic compliance scans of your domains against the open internet standards, and why tenders ask for them.
-
Tell security researchers how to report a vulnerability. One policy, many domains.
-
Publish your sustainability disclosures and upstream services where auditors and customers can find them.
-
The concepts behind the password prompt: htpasswd file, htpasswd users, realm, and the Apache vs nginx scoping difference.
Under the hood
The objects a project is built from. Reach for these when you need to change one specific part, or when a setup doesn't fit the project model.
-
The account that owns the files and processes of one environment. Daemons, usage tracking, malware scanning.
-
Serve a domain from a directory on disk. Language choice, and the automatic FPM pool reload on deploys.
-
Per-domain routing: which node serves traffic, which certificate is presented, who's allowed in.
-
Why your chosen PHP version is always the one that runs, why
sudodoesn't work, and the one reason to opt out. -
Send one domain to another. Path and query handling, server aliases, status codes.
-
Per-node allow-list rules. Source by IP or group, target by service, port or HAProxy listen.
-
Expose MariaDB, PostgreSQL, Meilisearch, SingleStore or RabbitMQ on a port or socket.
-
Run a custom internet-facing service
A websocket server, MQTT broker or custom API, supervised as a daemon and opened up to the internet.
-
Add a node group, such as Puppeteer or Node.js, to a node.
-
MX, SPF, DKIM, DMARC and auto-configuration. What each one does and what breaks if you skip it.
-
IMAP, POP3 and SMTP settings, plus step-by-step setup for Thunderbird, iOS Mail and Outlook.
-
Bring your contacts over when you move your email to Cyberfusion.
-
Bounce emails for unknown addresses
'Undeliverable' bounces from your own site's forms, and how to stop them reaching your real inbox.
Platform
-
Commercial certificates: DNS vs email validation, the approver email, EV vs DV, renewal cadence.
-
Domain registration and transfer durations
Why durations vary, the prerequisites that determine speed, and gTLD vs ccTLD differences.
-
Configure where notifications go, and to whom. Email, platform, Slack.
-
Send Cyberfusion notifications to a Slack channel of your choice.
-
Regaining access to the platform
What to do when you've lost your credentials, including when the email address is gone too.