TunnelFleet
TunnelFleet Blog

Expert VPN & Server Guides

Tutorials, how-tos, and insights on WireGuard, OpenVPN, and infrastructure management.

All WireGuard (3) OpenVPN (1) IKEv2 (1) DigitalOcean (1) Cloud-init (2) Networking (5) Security (8) DevOps (4) Self Hosting (1)

Latest Articles

cloud-init Examples for Server Automation
Cloud-init 10 min read

cloud-init Examples for Server Automation

Practical cloud-init snippets for Ubuntu VPS automation: packages, users, firewall, WireGuard install hooks, and first-boot hardening that survives rebuilds.

T
TunnelFleet Editorial ·
Infrastructure as Code for VPNs
DevOps 10 min read

Infrastructure as Code for VPNs

Treat VPN servers as declarative infrastructure: version configs, automate provisioning, and stop snowflake tunnel nodes before they become an outage.

T
TunnelFleet Editorial ·
Fail2Ban Guide: Stop Brute-Force Attacks
Security 9 min read

Fail2Ban Guide: Stop Brute-Force Attacks

Install and configure Fail2Ban on Ubuntu to ban abusive SSH (and other) clients: jails, filters, ban times, ignoreip, and how it complements UFW on a VPN VPS.

T
TunnelFleet Editorial ·
SSH Hardening Best Practices
Security 9 min read

SSH Hardening Best Practices

Harden OpenSSH on Ubuntu with concrete sshd_config settings: key-only auth, disable root login, restrict users, modern ciphers, and a host hardening checklist.

T
TunnelFleet Editorial ·
Configure DNS for Your Server
Networking 9 min read

Configure DNS for Your Server

Configure DNS for a VPS the way operators actually do it: A/AAAA records, TTLs, reverse DNS, resolver choice on Ubuntu, and naming patterns that work for VPN endpoints.

T
TunnelFleet Editorial ·
Enable IPv6 on Your VPS
Networking 10 min read

Enable IPv6 on Your VPS

Enable and verify IPv6 on an Ubuntu VPS: DigitalOcean networking, sysctl, AAAA records, UFW dual-stack rules, and how IPv6 interacts with WireGuard tunnels.

T
TunnelFleet Editorial ·
Configure UFW: A Practical Guide
Security 9 min read

Configure UFW: A Practical Guide

Configure UFW on Ubuntu the right way: default deny, allow SSH first, open WireGuard UDP, rate limiting, and rules that survive reboots without locking yourself out.

T
TunnelFleet Editorial ·
Secure a VPS: A Practical Checklist
Security 10 min read

Secure a VPS: A Practical Checklist

A practical hardening checklist for Ubuntu VPS servers: SSH keys, firewall, updates, users, Fail2Ban, and baseline controls before you run production services.

T
TunnelFleet Editorial ·
Install WireGuard on Ubuntu 24.04
WireGuard 10 min read

Install WireGuard on Ubuntu 24.04

Install and configure WireGuard on Ubuntu 24.04 LTS: packages, keys, wg0 config, IP forwarding, firewall rules, and a working client peer.

T
TunnelFleet Editorial ·