To encourage security best practices in SpinupWP we disable SSH password authentication by default. Instead, authentication with your servers is done using SSH Keys. How Do SSH Keys Work? The Secure Shell (SSH) protocol allows you to securely connect and authenticate to remote servers over an unsecured network using end-to-end encryption. SSH keys provide a more…
Our Recommendations For sites where every page can be full page cached, we recommend a max of 20 sites on at least a 2 GB / 1 shared CPU server. For a site that has pages that can’t be cached (e.g. WooCommerce), we recommend just that one site on at least a 4 GB / 2…
SpinupWP makes it very easy to switch the version of PHP that runs a site: From a site’s dashboard, select Settings from the left menu. Select your desired version of PHP from the drop-down menu. Click Save If you select a version of PHP that has not been installed on the server, it will be…
This guide aims to help you set up automated site backups. Site backups are full backups of your site files and database. Storage Settings Before you can enable site backups, you must configure a cloud storage provider where your backup files will be stored. Navigate to the Backups tab under a site. From here add your…
This guide aims to help you set up Google Cloud Storage for storing site backups. Whether you already have a Google Cloud Platform (GCP) account or not, you can sign in or sign up from the Console home page. Create Bucket Head over to Google Cloud Platform > Storage and click Create Bucket. Enter a unique…
This guide aims to help you set up DigitalOcean Spaces for storing site backups. Start by signing in to DigitalOcean. Create a Space Click Create in the header and select Spaces from the dropdown. Choose a datacenter region that’s geographically close to your server location. This will improve the time it takes to copy backup files…
When you invite a user to your account in SpinupWP you can choose the servers that they will have access to and their role. The role determines what things they are able to do on the servers they have access to. The role and server access of a user can be updated at any time…
SpinupWP utilizes two different types of system users. These users allow you to safely and conveniently manage your servers and sites. Let’s take a look at each. Sudo Users Following security best practices, SpinupWP disables SSH access for the root user on all servers. Instead, you can add sudo users, which will have sudo access. This…
The cache daemon is a little Go app we’ve written and deploy to every server to help with purging the page cache. The reason we need this daemon is an issue of file permissions. Each site runs a PHP pool as the site user but since cache files are owned by user www-data PHP cannot…
As described in Understanding System Users all sites deployed via SpinupWP are owned by a unique system user. This provides security isolation on the server because a site user cannot read or modify another site’s files. Each site is also deployed with a PHP-FPM resource pool, which is owned by the site user. This prevents…
Begin your SpinupWP journey today and spin up your first server within minutes.