The WordPress-First, User-Friendly Alternative to RunCloud

Security Security Security

Each server provisioned by SpinupWP is security-hardened from the word go. SSH login is disabled for the root user (you login with your user and use sudo instead). The firewall only allows connections to Nginx and SSH and failed attempts are monitored and blocked when they reach a threshold.

Nginx is configured to defend against XSS, clickjacking, MIME sniffing, and other attacks. Software security updates are installed automatically.

Scheduled Posts Published on Schedule

For every site you add via SpinupWP, a server-side cron job will be configured to make sure that your WordPress site’s cron is executed every minute, as it should be.

Security Isolation for Sites

For each site that you add to your server via SpinupWP, a new system user is created for that site. All site files are owned by the site user and a PHP-FPM pool is configured to run as that user as well.

Each site only has access to its files and so if only one site has a security vulnerability and gets infected with malware for example, only the files for that one site can be infected.

SFTP Access for Your Clients

If you’re hosting a site for someone else, you can easily give them SFTP/SSH access to just that site. And because of the security isolation between sites, they will only have access to files for that site.

Error Logs

WordPress doesn’t enable error logging by default. Probably because the log is saved to a publicly accessible directory and can quickly balloon to take up a lot of hard drive space. SpinupWP enables error logs by default but stores them in a safe place and makes sure they’re rotated regularly like other server logs.

Professional Guidance & Best Practices

SpinupWP will actively point you in the right direction and offer suggestions for maintaining your server. Much of the time SpinupWP will suggest things that you may not have even thought of.

SpinupWP’s guidance is especially helpful for those new to managing a server, but can also help those who’ve been at it a while, providing transparency to our decisions.

Automatic Security Updates

SpinupWP will configure your server to install security updates as soon as they are available to reduce the likelihood a software vulnerability putting your server at risk.

Latest & Greatest Software

SpinupWP will install the latest stable versions of Nginx, PHP, MySQL/MariaDB, and Redis from the standard apt-get repos. No who-knows-what-they-did custom builds of packages. Disconnect from SpinupWP in the future and you can still keep your packages up-to-date with apt-get upgrade.

Site Cloning

Need to deploy a staging site quickly? No problem! With SpinupWP you can create a complete copy of an existing site, which includes all files, the database, and server configuration. Ready to upgrade your site to a newer version of PHP but want to ensure your site is compatible? That’s where site cloning comes in.

Create a site clone with a few simple clicks, then test the new PHP version in an isolated environment, without impacting your live site. Once you’re confident in the changes, you can flick the switch on your live site.

Scheduled Backups of Site Files & Database

Site backups are full backups of your site files (media, themes, and plugins) and database. They allow you to easily restore a single site or just some files or data from a single site.

SpinupWP’s site backups, you choose your preferred provider to stash your backups whether that’s Amazon S3, DigitalOcean Spaces, or Google Cloud Storage. You plug in your account details and SpinupWP will send your site backups there in an easy-to-see format.

Git Push-to-Deploy

Add a git repository to your SpinupWP site and simply push to master to deploy your code. GitHub, Bitbucket, or a custom git repo will work. You can also configure a build script to run some tasks on the server after deployment is complete.

Teamwork Makes the Dream Work

Create a new team account, invite a member of your team, and allow them to spin up their own servers. Or just only allow them to add sites, the permissions you give them is up to you.