Looking for an easy tool to automate your Docker setup? 

Check out STACK BUILDER (Web application stack builder)

Let’s see how it works with a simple example!

Case 1: Setting up a basic nginx web server on Digital Ocean cloud.

Just log in to your account, click on STACK BUILDER, and then hit "Build your stack".

Since we don’t have any project, we need to create a new one. Simply click on the "Create new project" button, and you'll see the screen as shown in the screenshot below. From there, you can fill in the details according to your needs.

Here, enter the project name and other necessary details based on your needs. In this example, we'll set up a web server using Nginx. Go to the "Services" option and click on "Add from template"

Here, you'll find various ready-to-use Docker service templates. In our case, select Nginx, as shown below:

Next, you can adjust different settings like App name, Domain, Ports, Environment, Volumes, Networking, Docker Restart Policy, and more. In our case, we'll configure it without a domain name and using default predefined settings.

Once you've set up all the parameters, click on the "Continue" button. Then, choose your preferred cloud provider. In our example, we've selected DigitalOcean.

After selecting Digital Ocean, you'll see a screen like the one below, where you'll need to provide your Personal Access Token.

To get your Personal Access Token, follow the steps outlined in this link: https://try.direct/clouds/deploy-to-digital-ocean

Once you've generated your Personal Access Token on Digital Ocean, paste it in the designated field, as shown in the screenshot below:

Here, you can choose the Datacenter, Hardware configuration, and Base image by simply clicking on them. You can also select the number of Instances you need.

Next, click on continue button, and you will see your Docker-compose file in the next screen:

Review the docker-compose content, then click on the "Deploy" button to start your deployment automatically. It will take approximately 15 minutes. You can also check the runtime logs.

Once, the process is completed, you will see the screenshot similar to the below:

You'll notice the droplet has been automatically created in your DigitalOcean account. To access the Nginx webpage, simply enter your domain name or server IP address.

We have successfully set up Nginx web-server on Docker using Stack Builder.

Install Nginx on DigitalOcean using the ultimate simplifier for docker-compose builds and seamless deployment to the cloud. Think of it as a WEBUI for docker-compose, combined with a powerful deployment tool. It's designed to be the easiest way to unify your project's web applications, effortlessly connecting and installing them on your preferred cloud platform. 

Install Nginx on DigitalOcean using the ultimate simplifier for docker-compose builds and seamless deployment to the cloud. Think of it as a WEBUI for docker-compose, combined with a powerful deployment tool.

Install NGINX with application Stack Builder

Adding a public key to your server is an important step for enhancing security and enabling secure, password-free logins using SSH (Secure Shell).

Generate a Key Pair: Use ssh-keygen to create a new SSH key pair if you don't already have one. This includes both a public and a private key.

Locate the Public Key: Use cat ~/.ssh/id_rsa.pub to display your public key. This key needs to be copied to your server.

Copy the Public Key to Your Server: Use the ssh-copy-id command or manually append the public key to the ~/.ssh/authorized_keys file on your server.

Test Your Connection: Attempt to SSH into your server using ssh your_username@your_server_ip to confirm that you can log in without a password prompt, verifying that the setup was successful.

Here’s a step by step guide on how to do it, explained in simple terms:

If you do not already have an SSH key pair (which consists of a public and a private key), you will need to create one. On your local computer, open a terminal or command prompt and run the following command:

-t rsa specifies the type of key to create, in this case RSA.

-b 2048 specifies the key length, with 2048 bits being a good balance of security and performance.

Follow the prompts to specify where to save the key (by default, this is in the .ssh directory under your user directory) and whether to secure the key with a passphrase.

Once the key pair is generated, you need to find your public key. It’s usually named id_rsa.pub or similar, located in the .ssh directory. You can display the key with the command:

This command prints the contents of your public key file. It will look something like this:

Step 3: Copy the Public Key to Your Server

To enable authentication with your public key, you need to add it to a special file in the user account you are using on the server. This file is located at ~/.ssh/authorized_keys.

You can copy the public key to your server by using the ssh-copy-id command. Replace your_username@your_server_ip with your actual username and server IP address:

If ssh-copy-id is not available, you can manually add the key by appending it to the authorized_keys file. You can do this by running:

This command connects to your server, creates the .ssh directory if it doesn’t exist, and appends the public key to the authorized_keys file.

Finally, test your SSH connection to ensure that the key has been added successfully and you can log in without a password (unless you set a passphrase, which you will need to enter):

If everything is set up correctly, you should be logged into your server without needing to enter your user password.

Permissions: Make sure that the .ssh directory and the authorized_keys file on the server have strict permissions set. This can be done using:

Security: Always keep your private key secure and never share it. Use a strong passphrase for an extra layer of security.

Security Enhancement: Adding your public key to the server's authorized_keys enables secure, password-less authentication, which is more secure against brute-force attacks than password-based login methods.

Permissions: Ensure that the .ssh directory and the authorized_keys file on the server have proper permissions set to prevent unauthorized access. This means setting the directory to 700 and the file to 600.

Private Key Safety: The private key should remain confidential and never be shared. Securing it with a passphrase provides an additional layer of security.

Convenience and Efficiency: Using SSH keys speeds up the login process and can facilitate automated processes by allowing scripts and programs to securely access the server without manual password entry.

Learn how to securely add a public key to your server with our comprehensive guide. Enhance your server's security and simplify authentication processes effortlessly

Learn how to securely add a public key to your server with our comprehensive guide. Enhance your server's security and simplify authentication processes effortlessly.

How to add public key to your server

We are happy to introduce Stack Builder (beta) – a tool to Seamless Cloud Deployments! 🌐✨

Stack Builder was developed in response to multiple customer requests, and our aim was to keep it as simple as possible. While it is currently in beta, you can still enjoy its features.

Cloud Freedom: Explore the clouds like never before! Whether it's Digital Ocean, Hetzner Cloud, Linode, or beyond – Stack Builder empowers you to experiment and find the perfect cloud match for your projects.

DevOps Simplicity: DevOps can be as easy as 1-2-3! With our user-friendly interface and step-by-step guides, even beginners can become cloud maestros in no time.

Time Savings for Developers: The tool is perfect for developers who want to showcase their applications in the cloud, especially when considering the time spent.

combine various solutions available as Docker images, including those from Docker Hub. 

integrate your own application or set of applications into a solution  that results in a single Docker Compose file. 

This comes with the  ability to select the cloud and instantly deploy the solution, complete  with automatic infrastructure setup, VPS server, networks, firewalls.

"Great tool if you understand the concept of docker compose" 

"I was drowning in cloud complexity until I found TryDirect. Now, deploying applications feels like a walk in the cloud!"

"I was using OroCommerce on Google Cloud but then I wanted to try some other clouds, TryDirect helped me to setup oro on Hetzner Cloud and did that easy"    

Stack Builder (beta) – a tool to Seamless Cloud Deployments! Compose your solution from docker images including your personal apps. 



a tool to Seamless Cloud Deployments! Compose your solution from docker images including your personal apps. 

🚀 Introducing Stack Builder (beta)

🚀 Introducing Bastillion to Our Platform!

Are you in search of a solution to simplify secure remote access to your servers and network devices while ensuring top-notch security practices and compliance? Look no further than Bastillion, the open-source, web-based SSH console, and file transfer tool.

Whether you are an IT administrator, a managed service provider, or a cloud service provider, Bastillion has got you covered. It is designed to streamline remote access management, enhance security through role-based access control, and meet compliance requirements.

Getting started with Bastillion is a breeze! Our deployment process sets up Bastillion as a Docker container, complete with all the necessary configuration files, including docker-compose.yml. This empowers you to independently manage your server and carry out your development tasks without the need for additional assistance—simply follow the provided steps.

For more details, visit https://try.direct/applications/bastillion

Simplify Bastillion deployment on your own cloud-based VPS effortlessly | TryDirect

Discover Bastillion, the secure remote access solution, now available on TryDirect's platform.

Meet Bastillion at TryDirect 

Introducing HashiCorp Vault to our platform!

Whether you're a software developer or a system administrator, the HashiCorp Vault stack has got your interests covered. Tailor-made for contemporary DevOps and cloud-native configurations, it streamlines secrets administration and ensures top-tier security measures.

After successfully deploying HashiCorp Vault, an email notification will gracefully walk you through accessing both the server and the Vault Web UI. Just follow the provided steps to wrap up the setup hassle-free.

HashiCorp Vault painless deployment to your cloud account

🔒 Seeking a robust solution for efficient secrets management, safeguarding sensitive data, and elevating security within your IT infrastructure? Bid farewell to security worries with HashiCorp Vault! Seamlessly protect passwords, API keys, and more. An essential for DevOps and cloud environments.

HashiCorp Vault has arrived!

We are happy to announce that Nginx Proxy Manager,  is now available as a companion app to almost any stack on our platform!

Nginx Proxy Manager – your ultimate solution, ready for installation from our platform!

🔐 Why Opt for Nginx Proxy Manager: Bid farewell to the intricacies of traffic routing. 

Nginx Proxy Manager effortlessly directs traffic to your websites, whether they're hosted at home or elsewhere. What's more, it comes with complimentary SSL capabilities, eliminating the necessity for Nginx or Letsencrypt expertise. Simplify SSL generation and seamlessly proxy your Docker containers with unparalleled ease.

👨‍💻 Navigating Nginx Proxy Manager: Nginx Proxy Manager stands out as a highly recommended companion app for efficient web app management. Designed to handle numerous web applications at the backend, it's your secret recipe for streamlined operations. For added convenience, we also recommend integrating Portainer CE.

Don't forget, configuring the proxy host in Nginx Proxy Manager post-deployment is your gateway to seamless web traffic management.

Elevate your web traffic strategy with Nginx Proxy Manager – now at your fingertips!

Optimize web traffic management effortlessly with Nginx Proxy Manager, now available on our platform! Simplify traffic routing, secure websites with free SSL, and streamline Docker container proxying. Discover streamlined web app management and amplify operations. 

Optimize web traffic management effortlessly with Nginx Proxy Manager! Simplify traffic routing, secure websites with free SSL, and streamline Docker container proxying. Discover streamlined web app management and amplify operations.

Nginx Proxy Manager is here! 

🚀 Exciting News Update from TryDirect!


We're excited to share the news that FastAPI is now accessible for deployment on the TryDirect platform.

Simplifying the journey, TryDirect orchestrates a comprehensive VPS server setup, complete with all essential software. 

This empowers developers to seamlessly initiate their FastAPI projects in their favored cloud environment.

FastAPI, a globally acclaimed Python web framework, has ushered in a transformative paradigm shift for Python software development. Its exceptional speed and user-friendly design have revolutionized the process of API creation. Witness the remarkable transformation first-hand today! 🌐

Additionally, we recommend incorporating Portainer CE and Nginx Proxy Manager into your FastAPI deployment strategy. This integration empowers developers to proficiently manage Docker containers while effortlessly configuring domain and SSL settings. By embracing these tools, you'll optimize your management workflow and elevate your deployment experience. 🛠️🌐🔒

Deploy FastAPI on your own VPS in few clicks, test, play

FastAPI is now accessible for deployment on the TryDirect platform.

FastAPI has arrived!

Exciting tidings await as we unveil remarkable news! We're thrilled to announce the availability of OpenResty, the dynamic web platform integrating Nginx and LuaJIT, for seamless deployment on your preferred cloud infrastructure, courtesy of TryDirect.

Are you a developer or a pioneering startup in pursuit of a rapid, adaptable, and user-friendly platform that simplifies the creation of web applications and services? Look no further, for OpenResty is your unparalleled answer.

This is your golden opportunity to propel your projects to new heights. Venture to our website to discover the wealth of captivating details on harnessing the enchantment of OpenResty. Let's embark on a shared journey of crafting web development into a truly delightful and seamless experience! 🌐🌟

Deploy OpenResty to your own VPS in one click, play, test and learn it.

 We're thrilled to announce the availability of OpenResty, the dynamic web platform integrating Nginx and LuaJIT, for seamless deployment on your preferred cloud infrastructure, courtesy of TryDirect

OpenResty is ready for deployment

Enhancing Website Security and Performance

In today's digital landscape, website security, and performance are of utmost importance. That's where Cloudflare comes in. Cloudflare is a leading web infrastructure company that offers a comprehensive suite of services designed to protect and optimize websites. By leveraging Cloudflare, businesses can benefit from enhanced website security, protection against DDoS attacks, increased stability for high-traffic websites, and streamlined SSL certificate generation.

The Ease of Generating SSL Certificates with Cloudflare

SSL certificate generation is a crucial aspect of securing websites. Cloudflare simplifies this process by offering a user-friendly solution. By generating SSL certificates on Cloudflare, users can enjoy a hassle-free experience. This approach eliminates the need for manual configuration on the user's side, such as with WordPress. Cloudflare takes care of the certificate generation, making it easier for users to manage their SSL certificates effectively. Additionally, by generating certificates on Cloudflare, users can reduce dependencies and rely on a centralized platform for all their security needs.

Website Security and Stability with Cloudflare

When it comes to website security, Cloudflare is a powerful ally. Cloudflare's robust security features provide a layer of protection against various threats, including DDoS attacks and other malicious activities. With Cloudflare, businesses can ensure the stability of their websites, mitigate security risks, and maintain a seamless user experience. Real-world examples and case studies demonstrate how Cloudflare has successfully safeguarded websites, protecting them from potential vulnerabilities.

Unleashing Flexibility with User-Generated SSL Certificates

While Cloudflare offers a convenient solution for SSL certificate generation, there are instances where user-generated certificates may be preferred. By generating SSL certificates on the user's side, users gain more control and flexibility over their certificate management. This flexibility allows businesses to adapt their security measures to specific requirements and preferences. Depending on the scenario, user-generated SSL certificates can provide a tailored solution that aligns precisely with their needs.

How to Generate an SSL Certificate Using Cloudflare

Step-by-Step Guide: Generating an SSL Certificate on Cloudflare

Generating an SSL certificate using Cloudflare is a straightforward process. Here is a step-by-step guide to help you through the certificate generation process:

Access your Cloudflare account and navigate to the SSL/TLS settings.

Choose the desired SSL certificate option that aligns with your website's needs.

Follow the prompts and provide the necessary information for the certificate generation.

Verify the successful generation of your SSL certificate.

Validating a Let's Encrypt Certificate on a Site Already Active on Cloudflare

Validating a Let's Encrypt certificate on a site that is already active on Cloudflare is an important step in ensuring secure connections. Here's the process to validate your Let's Encrypt certificate:

Enable the Let's Encrypt certificate option in your Cloudflare SSL/TLS settings.

Follow the validation process outlined by Let's Encrypt to authenticate your domain ownership.

Once validated, Cloudflare will automatically manage and renew the Let's Encrypt certificate for your site.

Using Let's Encrypt certificates in conjunction with Cloudflare offers numerous benefits, including enhanced security and encryption for your website. By combining the power of Let's Encrypt and Cloudflare, you can ensure the highest level of security and trustworthiness for your online presence.

At TryDirect, we provide you with the flexibility to choose between Cloudflare certificates and the pre-installed Certbot when deploying your application. However, it is important to note that using both options simultaneously may result in connection issues. Therefore, it is essential to select one approach based on your specific needs.

If you decide not to use Cloudflare SSL, you demonstrate courage and choose the harder path. However, this decision grants you greater control over your website's security, as you are not reliant on Cloudflare for SSL management. By opting for this route, you can implement security measures tailored to your unique requirements and maintain full ownership of your SSL certificates.

Our team is here to support you in making the best choice for your website's security. Whether you choose Cloudflare certificates or prefer to handle SSL management independently, we will provide the necessary guidance and expertise to ensure a secure and reliable environment for your online presence.

Feel free to reach out to us if you have any questions or require further assistance in determining the best SSL approach for your website.

All that you need is just connect your instance via SSH and install certbot using following command

For any help regarding your website  performance and security enhancement contact us at or explore our services

Which approach is better to setup SSL on your website for better security, Cloudflare or self-deployed Certbot?

CloudFlare or self-deployed Certbot for your web-site SSL, which one to choose.

SSL Certificates have become a modern necessity. Organizations operating online need to add them to their website for secure transactions and user information. They are also good at keeping cyberattacks at bay.

However, not many people are familiar with the ways to get an SSL certificate. And those who are, don’t know how to check their SSL certificate’s validity. All these small problems lead to major inconveniences.

This article aims to tell you more about Let’s Encrypt and Certbot and the most efficient method of checking the SSL certificates’ installation and validity.

Let’s Encrypt is a free and automated authority that provides TLS/SSL certificates to a compatible client. You can use them for data and communication encryption for your website users.

Let’s Encrypt is developed by the Internet Security Research Group (ISRG). The main purpose of these digital certificates is to enable HTTPS for websites at no cost. 
On the other hand, the paid certificates’ market is quite vast.

Let’s Encrypt offers two types of certificates:

Both of them are issued for 90 days and renewed automatically after installation.

These certificates are domain-validated and do not require a dedicated IP address. Let’s Encrypt provides a more straightforward way of receiving certificates. It does not involve any charges, email verifications, etc., and is fully automated. All you have to do is start the enrollment process.

Certbot is a command-line client app that fetches a certificate from Let’s Encrypt—an open certificate authority launched by the EFF. It deploys the certificates to a web server after getting them It is an easy-to-use client that works in five simple steps:

Install the Certbot, which is packaged in most Linux distro repositories.

Post-configure your web server if needed.

Enable the Automatic Certificate Renewal.

Restart the web server after the renewal.

These SSL/TLS certificates are deployed to your web server automatically. You can also set this process to fetch only the latest version by using Certbot-auto.

Another well-known term related to Certobot is the Webroot Certbot. It works by assigning public availability to a folder. The name Webroot comes from the procedure behind this plugin: the client places the file and pings a server to fetch it. You have to specify the web-serving root during the process. 
All the issued certificates can be found in:

It provides a command-line interface, good with HTTP website with port 80 open.

You can choose from various servers, including virtual private server, dedicated server, and cloud-hosted server, accessible with SSH.

All of the Certbot certificates are auto-renewable after every 60 days.

The Best Ways to Check if an SSL Certificate is Installed and Valid

The first method includes a Linux command line.

You have to start with the verification status code. It shows whether the certificate is installed or not. The verification code “0” means the process was successful. 
However, if you see “20” as status, the certificate is not configured correctly. You will also get an error: ‘unable to get local issuer certificate.’ 
Next, check your certificate’s path using the command line below. It will help you find out whether it is valid or not.

$ openssl s_client -connect www.yourwebsite.tld:443

You will get the location as -CApath /etc/ssl/certs/

$ openssl s_client -connect www yourwebsite.tld:443 \

The path will be shown as: -CAfile /etc/ssl/certs/ca-certificates.crt

You will see the option to verify the hostname with the result. “0” status code means the verification was successful. If there’s an error, you will get a return code: 62, along with the error ‘Hostname Mismatch.’

Sometimes, you will also see the option to verify a certificate that has been issued to an IP address instead of a hostname. For this, you will need to use –verify_ip switch. It will check the IP address and show the successful results.

Here, you will see a list of certificates. These are the ones listed in the store. Navigate through the legitimate ones to find out which of them are installed. 
Though seeming simple, this method is very time-consuming.

Start with going to sigcheck and Press Download.

After the downloading process is finished, install the application.

Start Run, and Enter command sigcheck –tv.

The Sigcheck tool downloads the trusted Microsoft root certificate list. You can see the valid certificate there. It is also easy but time-consuming as you have to download and install the application.

You can download any tools and applications to check your certificates instantly. However, some of them might not work properly or are not licensed. 
The ones we mentioned above are trusted worldwide, but the most preferred way still is to use the Linux command line. It will help you view the address of your certificate and will visualize the correct installation and validation.

https://www.sslshopper.com/ssl-checker.html

https://serverfault.com/questions/589590/understanding-the-output-of-openssl-s-client

https://stackoverflow.com/questions/24992976/openssl-telling-certificate-has-expired-when-it-has-not

https://community.letsencrypt.org/t/problem-with-certificate-has-expired/161013/2

Let’s Encrypt and Certbot | How to check SSL

OpenVPN is an open-source protocol that creates a secure tunnel between your device and the VPN server. OpenVPN sends encrypted data over the internet. It is one of the most reliable and widely used protocols for VPN connection.

OpenVPN uses SSL/TLS for key exchange. OpenSSL library’s encryption, authentication, and SSL certificate make VPN connection more secure.

OpenVPN supports industry-standard 256-bit AES encryption.

Any new vulnerabilities are quickly fixed due to the sizeable

Let’s create our first OpenVPN server at Digital Ocean.

I assume that you already have an account.

Sign in and click the “Generate New Token” button, as shown below.

Next, enter the Token name and select the token expiry term you’d like to set from the drop-down menu. It’s very important to check the Write permission. This allows TryDirect to create a Droplet in your account.

Now, click the “Generate Token” button to create an API token.

Copy and save the Token. You will need to provide this token later.

Next, log in to the TryDirect dashboard using https://try.direct/sign_in. If you don't have a TryDirect account, SIGN UP for a new account using https://try.direct/sign_up

After login, click the 'STACKS' option from the top menu, search for OpenVPN, and click it.

You will see the OpenVPN page with a description. Find the 'DEPLOY TO' button on this page, click it and select 'DIGITAL OCEAN' as shown in the below screenshot.

Next, you will be redirected to “OpenVPN—New Deployment.” Enter your domain name and your Digital Ocean API Token, which you had created earlier. Here the "BASE DOMAIN NAME" and "ADD PERSONAL ACCESS TOKEN" are mandatory. Fill in all the details required on this page.

Then select the data center region where you want to deploy the OpenVPN server.

Next, choose the server from a list and select features per your requirements.

Your OpenVPN server deployment started. It will take around 15 minutes.

At the same time, you will see a new droplet created on your Digital Ocean account.

Once the OpenVPN setup process is completed, a detailed information menu will pop up.

You will receive a notification email from TryDirect that contains a deployment-configs PDF file, the key PEM file of your server and OpenVPN configuration file with ovpn extension.

Download your “ovpn” file and save the file somewhere on your system. You will need this “ovpn” file later for the OpenVPN connection.

Now, you need to install the OpenVPN client for your OS

Go to https://openvpn.net/community-downloads/ and Download OpenVPN client.

Next, install the OpenVPN client on your system.

What is OpenVPN. How to deal with OpenVPN

What is OpenVPN

Linux has some mighty commands which can come in handy to system administrators or power users, and lsof is one of them. This command stands for ‘List of Open Files.’ In Linux, everything is a file, including network connection, devices, directories, network sockets, etc. Here, lsof helps you identify which files are being used by which processes. You can also track user activity by checking files and processes used by that specific user using the lsof command. Moreover, thanks to lsof you can quickly find additional information such as the port used by services/files, sockets in use, etc. Hence, you can say that the lsof command is capable of replacing commands like netstat and PS.

This guide will provide you with a basic understanding of lsof command with practical examples.

By running just the 'lsof' command, you will get a list of all system's open files.

root@beta:~# lsof
COMMAND  PID   TID          USER   FD   TYPE          DEVICE SIZE/OFF    NODE NAME
systemd    1                root  cwd    DIR           252,1  4096       2 /
systemd    1                root  rtd    DIR           252,1  4096       2 /
systemd    1                root  txt    REG           252,1  1616248   42953 /lib/systemd/systemd
systemd    1                root  mem    REG           252,1  1700792   31573 /lib/x86_64-linux-gnu/libm-2.27.so
----

Note: Here, the output of the lsof command is very long. Hence, the output for most of the commands in this post has been truncated. The ellipsis (…) at the end will show the outputs that have been omitted.

How to use the Isof command in Linux. Detailed guide with examples.

Dashboard