Stop your box from freezing instead of OOM-killing Low-RAM boxes don't crash cleanly, they hang for minutes while the kernel thrashes before the OOM killer wakes up. earlyoom acts early. — apt install…
One-line SSH bruteforce shield, no fail2ban needed Don't have fail2ban set up yet on a fresh box? ufw has built-in rate limiting. — ufw limit 22/tcp That blocks any IP making 6+ connections in 30 seco…
Your MySQL is writing temp tables to disk Slow queries on a small box are often silent on-disk temp tables. Check, then raise the ceiling. — SHOW GLOBAL STATUS LIKE 'Created_tmp_disk_tables'; — if it'…
Check your VPS isn't stuck at half speed Some cheap hosts ship the powersave CPU governor and your vCPU lazes at min clock under load. — check: cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_governo…
Stop cron jobs from stacking on top of each other Your 5-min sync takes 6 minutes one day and now two copies fight over the DB. Wrap it in flock. — * * * * * /usr/bin/flock -n /tmp/sync.lock /usr/loca…
The silent disk-filler: logs You'll get paged for "disk full" and it's nginx access logs from 2 years ago. Crank logrotate before it bites. — in your nginx logrotate: rotate 7, daily, compress, delayc…
