The HostSSH Blog
Portable hosting, disaster recovery, and infrastructure you actually own.
Choosing your storage custody: agent-local, zero-knowledge, or escrow
Bring your own bucket — then choose exactly how much the control plane can ever see. The three custody models and the trade-offs between recoverability and zero-knowledge.
An untested backup is not a backup: the case for restore drills
The only way to know a backup works is to restore it. How automated restore-drills turn a hope into a verified, dated fact.
Migration without downtime: how one-click relocate works
How HostSSH captures a whole server into one encrypted image and brings it up on a fresh VPS with the public IP rewritten — so a move is a controlled cutover, not an outage.
Hardening a fresh VPS: the baseline every server should have
sshd, firewall, unattended upgrades, sysctl, and intrusion prevention — the baseline hardening every internet-facing box needs, and why lockout-safety matters most.
Full-server vs database-only backups: what you’re actually protecting
Database dumps protect rows. They don’t protect the box. The difference between a db-only backup and a whole-server image — and when each is the right call.
Why your data should never be held hostage (the HostSSH license guarantee)
Most platforms make leaving expensive on purpose. HostSSH writes the opposite into its license: an open format, an always-available export, and a guarantee that works even if the company doesn't.
One-click relocate: moving a live Coolify box to a new IP
Relocating a server that's actively serving traffic is a choreography problem, not a copy problem. Here's how HostSSH moves a live Coolify box to a new IP with a clean cutover and a real rollback.
Restore-drills: proving your backups before you need them
A backup you've never restored is a hypothesis, not a safety net. HostSSH runs scheduled restore-drills on throwaway targets and turns recoverability into something you can actually see.
Servers that can't be held hostage
Most hosting quietly locks you in. HostSSH inverts that — every server captures itself into one encrypted image you can restore, clone, or relocate anywhere.
Relocate to a new IP in one click
Changing a server's IP usually breaks a dozen hard-coded references. The WireGuard-overlay insight makes relocation clean — only public refs rewrite, internal ones stay stable.
BYOK: your backups, your bucket
Bring your own storage and your own keys. Three custody models — agent-local, zero-knowledge, and escrow — let you choose exactly how much HostSSH can ever see.