Store Model API Keys as Secrets on a Linux VPS
Keep OpenAI and Anthropic keys in a root-owned systemd EnvironmentFile on Ubuntu so a Lucknow VPS never leaks model credentials through git or logs.
NetBay journal
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
Keep OpenAI and Anthropic keys in a root-owned systemd EnvironmentFile on Ubuntu so a Lucknow VPS never leaks model credentials through git or logs.
Put each tenant on a separate VPS node so disk, network, and process blast radius stay bounded when a noisy neighbor fails or is compromised.
Master every GitHub Actions trigger — push, pull_request, schedule and workflow_dispatch — and pick the right event, branch and path filters for your pipeline.
Replace deprecated ifconfig with the ip command to manage interfaces, addresses, routes, and tunnels on modern Linux distributions.
Put Node.js 22 on a headless Ubuntu 24.04 VPS with the NodeSource repo, skip snaps and desktops, and verify a production-ready runtime in minutes.
Track what your cluster is doing with kubectl logs, metrics-server, and lightweight dashboards on k3s — no heavy observability stack needed.
Compare the authorization code and client credentials OAuth 2.0 grants to choose the right delegation flow for your API clients and integrations.
Choose a Windows VPS when IIS, Active Directory, .NET Framework, or RDP admin is the job. This guide maps the real workload split versus Linux.
Pin a MariaDB series on Ubuntu, bind it locally, create an app user, and finish a first-boot checklist before any application is allowed to connect.
Install Redis from Ubuntu or Debian packages, bind the daemon to localhost, and confirm nothing on the public interface can reach port 6379.
Capture CPU, memory, disk, and network baselines from the Linux CLI so you know what is normal on your VPS before Grafana is even installed.
Install Python 3, create an isolated venv, and pin pip packages on Ubuntu so your VPS app stays reproducible without polluting the system interpreter.