Installing Claude Code: https://code.claude.com/docs/en/setup Skills to install: https://github.com/obra/superpowers https://github.com/thedotmack/claude-mem https://github.com/microsoft/playwright-mcp Supabase: https://supabase.com/ Supabase MCP: https://github.com/supabase-community/supabase-mcp Deploy your application with Dokploy: https://dokploy.com/ Resend for emails: https://resend.com/

In this video I show you how to install Hermes Agent on a VPS securely using Tailscale – step by step and beginner friendly. 👉 This setup keeps your server private and takes less than 30 minutes. - How to set up your VPS - Connect with Tailscale - Secure your setup properly - Install Hermes Agents - Configure your agent - Deploy and run your agent This setup keeps your AI agents private and gives you full control without exposing everything to the public internet. Step 1 - Set Up Your VPS Start with a clean VPS. Connect via SSH using the IP your provider assigned: ssh root@VPSIPHERE Now your server is ready for the next steps. Step 2 - Create a New User Don't run things as root. Create a regular user and add them to the sudo group: adduser --gecos "" username adduser username sudo Step 3 - Create an SSH Key On your local machine, generate a modern Ed25519 key. Give it a name and a strong passphrase when prompted: ssh-keygen -t ed25519 Copy the public key to your VPS: ssh-copy-id -i keyname.pub username@VPSIPHERE Then disable password authentication. Open the SSH config: nano /etc/ssh/sshd_config.d/50-cloud-init.conf Set PasswordAuthentication no. Press Ctrl + X, then Y, then Enter to save and exit. Restart SSH: service ssh restart Always keep your existing SSH session open while testing the new key in a second terminal. If anything is wrong, you still have a way back in. Connect with the new SSH key: ssh -i ./keyname 'username@VPSIPHERE' Step 4 - Set Up Tailscale Download Tailscale to your local computer first: tailscale.com/download Then install Tailscale on the VPS: curl -fsSL https://tailscale.com/install.sh | sh sudo tailscale up tailscale status sudo tailscale set --operator=username Firewall rule: Make sure UDP 41641 is allowed outbound on your VPS so Tailscale can establish its WireGuard tunnels. You do not need to expose it publicly. Once Tailscale is up, connect to your VPS over the private Tailscale IP instead of the public one:

Learn how to run OpenClaw on your own server without exposing it to the public internet. This setup is one of the easiest and safest ways to do it. In this guide, you'll install OpenClaw on a VPS and secure it using Tailscale. No complicated DevOps. Just a clean, working setup. Why Use Tailscale? Most VPS setups expose your app directly to the internet. That's risky. With Tailscale, you: Create a private network (a WireGuard mesh) Access your server securely with no public-facing ports Avoid opening unnecessary ports to the internet Bottom line: Your app stays private, but still accessible to you from any device on your Tailnet. What You Need VPS hosting (I use Hostinger) SSH keys (no password logins) A free Tailscale account A firewall (UFW or your provider's) to keep unused ports closed Step 1 - Set Up Your VPS Start with a clean VPS. Connect via SSH using the IP your provider assigned: ssh root@VPSIPHERE Now your server is ready for the next steps. Step 2 - Create a New User Don't run things as root. Create a regular user and add them to the sudo group: adduser --gecos "" username adduser username sudo Step 3 - Create an SSH Key On your local machine, generate a modern Ed25519 key. Give it a name and a strong passphrase when prompted: ssh-keygen -t ed25519 Copy the public key to your VPS: ssh-copy-id -i keyname.pub username@VPSIPHERE Then disable password authentication. Open the SSH config: nano /etc/ssh/sshd_config.d/50-cloud-init.conf Set PasswordAuthentication no. Press Ctrl + X, then Y, then Enter to save and exit. Restart SSH: service ssh restart Always keep your existing SSH session open while testing the new key in a second terminal. If anything is wrong, you still have a way back in. Connect with the new SSH key: ssh -i ./keyname 'username@VPSIPHERE' Step 4 - Set Up Tailscale Download Tailscale to your local computer first: tailscale.com/download Then install Tailscale on the VPS: curl -fsSL https://tailscale.com/install.sh | sh

Vercel got hacked… and that was the moment I decided to move everything off. If you’re relying fully on platforms like Vercel, you’re fast - but you’re also dependent. One issue, one outage, one security scare… and you’re stuck. So I switched to a VPS with Dokploy - and honestly, it’s way simpler than most people think. Here’s exactly how I did it. Why I Left Vercel? Vercel is great. No doubt. - super fast deployments - easy Git integration - clean developer experience But the downside? - no full control - limited flexibility - dependency on a third-party platform After seeing security concerns, I wanted something I fully own. Why Dokploy + VPS Dokploy is basically a self-hosted deployment platform. Think of it like your own Vercel… but on your server. - full control over your apps - deploy using Docker - simple UI (no complex DevOps needed) - works great on a VPS This combo gives you power without making things complicated. Step 1 - Get a VPS First, you need a server. I use Hostinger VPS - https://www.hostinger.com/vps-hosting Basic specs are enough to start: 2 vCPU cores 8 GB RAM 100 GB NVMe disk space 8 TB bandwidth Once your VPS is ready, connect via SSH. Step 2 - Install Dokploy Installing Dokploy is straightforward.https://dokploy.com/ Run the install command from their docs and it will: - set up Dokploy - give you access to a dashboard After that, open your browser and log in. Step 3 - Connect Your Project Inside Dokploy: - create a new project - connect your Git repo - configure environment variables This is very similar to Vercel - but now it’s your infrastructure. Step 4 - Deploy Your App Click deploy and let Dokploy handle the rest. It will: - build your app - run Docker containers - expose your app At this point, your app is live on your VPS. Step 5 - Secure Everything. This part is important. Make sure you: - enable HTTPS (SSL) - use strong SSH keys - close unused ports - keep your server updated