Skip to main content
For an ordinary VPS, follow the personal-node guide. Its Compose profile pins the published 1.20.6 ordinary-node image by digest, mounts a keyless configuration, persists SQLite and local blocks, terminates HTTPS at Caddy, and uses an installation-specific persistent key. The guide’s CI rehearsal uses the same operator script to check signed KV/SQL, restart, fresh-volume restore, upgrade from 1.20.5 to 1.20.6, and restore-based rollback. Do not use an unversioned image or the dstack Compose profile as an ordinary-server recipe. TinyCloud currently runs 1.20.6 in production; 1.20.7 was rolled back. The guide names what its published-image job has verified and which key-default change needs the next approved release. Running an ordinary VPS does not provide TEE attestation or dstack key isolation. For configuration details, see Configuration. Keep the node’s plain HTTP API and unauthenticated metrics private; expose only the HTTPS reverse proxy. Retain the node root and an offline data backup independently.