Configuring Deployment on VDS/VPS: Automation and Security

Configuring Website Deployment on VDS/VPS

Development and maintenance of all types of websites:

Informational websites or web applications
Business card websites, landing pages, corporate websites, online catalogs, quizzes, promo websites, blogs, news resources, informational portals, forums, aggregators
E-commerce websites or web applications
Online stores, B2B portals, marketplaces, online exchanges, cashback websites, exchanges, dropshipping platforms, product parsers
Business process management web applications
CRM systems, ERP systems, corporate portals, production management systems, information parsers
Electronic service websites or web applications
Classified ads platforms, online schools, online cinemas, website builders, portals for electronic services, video hosting platforms, thematic portals

These are just some of the technical types of websites we work with, and each of them can have its own specific features and functionality, as well as be customized to meet the specific needs and goals of the client.

Our competencies:

Frequently Asked Questions

Latest works

  • image_web-applications_feedme_466_0.webp
    Development of a web application for FEEDME
    1281
  • image_ecommerce_furnoro_435_0.webp
    Development of an online store for the company FURNORO
    1237
  • image_crm_enviok_479_0.webp
    Development of a web application for Enviok
    977
  • image_crm_chasseurs_493_0.webp
    CRM development for Chasseurs
    1027
  • image_website-sbh_0.webp
    Website development for SBH Partners
    1103
  • image_website-_0.webp
    Website development for Red Pear
    550

Configuring Website Deployment on VDS/VPS

A developer spent a month fighting Laravel deployment on a VDS — every time something went wrong: either permissions on storage were reset, migrations didn't run, or npm ci failed with an error. The project stalled, and the client got nervous. Sound familiar? We solved it in two days by automating deployment and writing simple documentation. Full control over the server is great, but only when everything is set up properly. Our experience: over 6 years of server configuration and 300+ successful projects. We guarantee a 99.9% uptime and reduce deployment time by 90%.

What problems does professional VDS/VPS deployment solve?

Insecure root access. Many beginners leave SSH open for root with a password. Brute force tries thousands of combinations in a day. We create a separate deploy user with keys, disable root login, and set up Fail2ban — the risk of break-ins drops by 99%.

Manual deployments with errors. When every update means manually running git pull, composer install, npm run build, and hoping nothing breaks, a fatal error eventually happens. We set up automatic deployment via Deployer or GitHub Actions: one command pushes code, and the server automatically pulls updates, runs migrations, and reloads PHP-FPM. This approach is 10 times faster than manual: instead of 30 minutes, deployment takes 3.

Lack of monitoring. You learn about a site outage from the client, not from the system. We install Netdata or Prometheus Node Exporter — you see CPU load, memory, disk, and network in real time. Outages won't catch you off guard.

How we set up deployment: a case from our practice

Consider a project from our practice: the client rented a VDS from Selectel (4 vCPU, 8 GB RAM) for a Laravel app with PostgreSQL and Redis. Task: configure a production environment, automatic deployment via GitHub Actions, and basic monitoring.

  1. Server preparation: SSH key-based access, deploy user, update packages, install Nginx, PHP 8.3 with extensions, Composer, Node.js 20, PostgreSQL 16, Redis.
  2. Web server configuration: Nginx configuration for Laravel: single entry point, static cache for a year, gzip for CSS/JS, block access to hidden files.
  3. SSL: Let's Encrypt via Certbot with auto-renewal.
  4. Deployment via GitHub Actions: Write a workflow: on push to main — copy code, install dependencies, run migrations, optimize, reload PHP-FPM and Nginx.
  5. Monitoring: Install Netdata on port 19999 (firewalled via UFW), set up Telegram notifications for overload.

Result: deployment takes 2 minutes (down from 40 minutes), monitoring shows everything in real time, the client sleeps peacefully. By our estimates, deployment automation saves up to 30,000 rubles per month in downtime.

Why deployment automation cuts time by 10 times?

Manual deployment is a chain of commands where mistakes are easy: forgot to run migrations, didn't update cache, messed up permissions. Automation via CI/CD eliminates human error. For example, GitHub Actions runs a sequence: git pullcomposer installphp artisan migratenpm run build → restart services. The whole process takes 3 minutes instead of 30 when done manually. Plus, each step is logged, and in case of an error, you get a notification.

Deployment type Time Error risk
Manual 30 min high
Automatic (CI/CD) 3 min low
Typical mistakes in manual deployment
  • Forgot to switch branches — deployed old code.
  • Didn't update dependencies — version errors.
  • Migrations applied in wrong order — data loss.
  • Broke storage permissions — 500 error.
  • Didn't clear cache — users see old version.

Automation solves all these problems once and for all.

Process

  1. Analysis: discuss the project, stack, load, choose VDS provider.
  2. Design: create a deployment scheme, select automation tools.
  3. Implementation: server setup, deployment scripts, SSL, firewall, monitoring.
  4. Testing: check each stage — availability, speed, security.
  5. Deployment: hand over documentation, train the team, final launch.

Estimated timeframes

Stage Time
Initial VPS setup + stack 1-2 days
Deployment automation (CI/CD) 1-2 days
SSL + firewall + Fail2ban a few hours
Monitoring + notifications 1 day
Total (turnkey) 2-4 days

The cost is calculated individually — depends on project complexity and number of servers. Contact us, and we will send a commercial offer.

Checklist: what to check before deployment

  • SSH access only via keys, root login disabled
  • UFW allows only SSH, HTTP, HTTPS
  • Fail2ban configured for SSH and web server
  • SSL certificate installed and auto-renewing
  • Deploy user has permissions only to its directory
  • Backups (if required)
  • Monitoring is active and sending alerts

What's included in the work

  • Full server setup: OS, web server, database, languages, packages
  • Automatic deployment via Deployer / GitHub Actions / custom script
  • SSL certificate (Let's Encrypt or other) with auto-renewal
  • Firewall (UFW) + Fail2ban — basic security level
  • Monitoring (Netdata / Prometheus) with alerts
  • Documentation on deployment and support
  • Team training (1-2 hours)

For more details on SSH and security configuration, see the official OpenSSH documentation.

Want a hassle-free deployment setup? Contact us — we'll evaluate your project in one day. Get a consultation right now.