Operation And Maintenance Tools Recommend A Collection Of Automated Scripts For Managing Singapore Vps Cloud

1. overview and applicable scenarios

1) objective description: this article is intended for operators and developers who need to manage singapore (ap-southeast-1/sg) vps/cloud hosts, focusing on automation and repeatability.
2) applicable scenarios: static/dynamic website deployment, api backend, containerized services, edge node caching and low-latency applications.
3) basic requirements: automated initialization, certificate management, backup strategy, monitoring alarms, and ddos/traffic protection.
4) common suppliers: digitalocean, vultr, linode, aws singapore, alibaba cloud singapore node, etc.
5) risk and compliance: pay attention to data sovereignty, bandwidth billing and firewall rules. it is recommended to enable cdn and waf in production environments.

2. recommended initialization and automated deployment tools

1) terraform: used to declaratively create vps, vpc, floating ip, and dns. suitable for multi-vendor infra management.
2) ansible: used for host configuration, software installation, and certificate deployment, suitable for agentless ssh mode automated operation and maintenance.
3) cloud-init/user-data: automatically complete key injection, basic package installation and systemd service registration on first startup.
4) docker & docker compose: containerized deployment and process isolation facilitate ci/cd and rollback.
5) example: simple ansible task (initializing firewall and updating):

- name: update & ufw
  hosts: sg_vps
  become: yes
  tasks:
    - apt: update_cache=yes upgrade=dist
    - ufw: rule=allow port=22 proto=tcp

3. collection of daily operation and maintenance scripts (backup, update, user management)

1) incremental backup: rclone (synchronized to wasabi/s3) is recommended, executed daily with cron, and retains 7-day snapshots.
2) local snapshot and api: connect to the vultr/do api to take a disk snapshot, and the script can use curl + jq to call the provider interface.
3) automatic update script: schedule apt/yum updates and notify via email. it is recommended to use unattended-upgrades for non-critical services.
4) user and key management: centrally manage ssh public keys, use ansible for batch injection and regular rotation.
5) example crontab (daily 02:10 rclone backup /var/www):

10 2 * * * /usr/bin/rclone sync /var/www s3:company-backups/sg-vps --log-file=/var/log/rclone-sg.log

4. monitoring, alarm and log management

1) monitoring stack: prometheus + node_exporter + grafana, used for real-time cpu/memory/disk/network card traffic monitoring.
2) lightweight monitoring: netdata can be used for real-time display on a single machine, making it easy to quickly locate performance problems.
3) log aggregation: loki+promtail or elk (elasticsearch+logstash+kibana) is recommended. the log retention period is set according to compliance.
4) alert strategy: alertmanager cooperates with slack/email, example threshold: cpu >= 85% triggers an alarm for 5 minutes.
5) monitoring data example (sampling): sampling node_exporter every minute:

cpu_usage: 12.4% memory_used: 512mi / 2gi disk_root: 9.1gb / 40gb net_in: 1.2mb/s

5. security protection: firewall, ddos, cdn and waf

1) border protection: prioritize using cloudflare/tencent cloud cdn as a forward proxy (enable proxy), hide the real ip and enable waf.
2) host firewall: use nftables/ipset to limit high-frequency connections, and cooperate with fail2ban to automatically block abnormal ips.
3) ddos response: enable cdn + rate-limit in large traffic scenarios, and use kernel parameters (net.ipv4.tcp_syncookies=1) to mitigate syn flood.
4) connection limit example: use ipset + nftables to limit the number of concurrent connections per ip (the sample script can be automatically injected).
5) waf and automated rules: write common attack patterns into modsecurity or cloudflare custom rules and automatically deploy them through ci.

6. real cases and configuration demonstrations

1) case background: an e-commerce company deployed its main website in singapore to cover southeast asia, using vultr's singapore node as the host and enabling cloudflare cdn.
2) use tools: terraform management instance, ansible to complete basic configuration, prometheus+grafana monitoring, rclone backup to wasabi.
3) an example of instance configuration (2 web servers, 1 monitoring server, and 1 backup gateway) is as follows: