https://provisore.com/blog Deploying and running Laravel, PHP, Node and Swift applications on servers you own. en https://provisore.com/blog/php-cve-2026-109618 https://provisore.com/blog/php-cve-2026-109618 Two CVSS 9.2 PHP flaws allow remote code execution. The fixed builds on Ubuntu 24.04 and 26.04, and why PPA PHP never updates itself. Wed, 21 Oct 2026 00:00:00 GMT https://provisore.com/blog/harden-ubuntu-server https://provisore.com/blog/harden-ubuntu-server A deploy user, SSH keys only, UFW, fail2ban and unattended security upgrades, in the order that cannot lock you out. Tested on Ubuntu 24.04 and 26.04. Tue, 20 Oct 2026 00:00:00 GMT https://provisore.com/blog/laravel-queue-workers-systemd https://provisore.com/blog/laravel-queue-workers-systemd Run queue:work and Horizon as systemd services instead of Supervisor: template units, restarts on deploy, journalctl logs and memory limits. Tue, 20 Oct 2026 00:00:00 GMT https://provisore.com/blog/deploy-laravel-hetzner https://provisore.com/blog/deploy-laravel-hetzner Server types and locations, Cloud Firewall and UFW, cloud-init for PHP-FPM and Nginx, the database, Object Storage backups, snapshots and volumes. Tue, 20 Oct 2026 00:00:00 GMT https://provisore.com/blog/zero-downtime-laravel-deploys https://provisore.com/blog/zero-downtime-laravel-deploys Build each release in its own directory, share storage and .env, swap one symlink, health-check the site and roll back on failure. A complete script. Tue, 20 Oct 2026 00:00:00 GMT https://provisore.com/blog/laravel-scheduler-cron https://provisore.com/blog/laravel-scheduler-cron The one crontab line Laravel needs, which user and PHP binary it must use, why it runs by hand but not from cron, and how it fits a release layout. Tue, 20 Oct 2026 00:00:00 GMT https://provisore.com/blog/database-backups-s3 https://provisore.com/blog/database-backups-s3 A cron script that dumps MySQL or PostgreSQL and uploads it to S3, Cloudflare R2 or Hetzner Object Storage, with retention and a tested restore. Tue, 20 Oct 2026 00:00:00 GMT https://provisore.com/blog/deploy-laravel-ubuntu https://provisore.com/blog/deploy-laravel-ubuntu Nginx, PHP-FPM, MySQL or Postgres, Composer, permissions, .env, SSL, queue workers and the scheduler: a production Laravel server, step by step. Tue, 20 Oct 2026 00:00:00 GMT https://provisore.com/blog/nginx-laravel-config https://provisore.com/blog/nginx-laravel-config A complete Nginx server block for Laravel with PHP-FPM, explained line by line, with fixes for 404s, "File not found", subdirectories and Reverb. Tue, 20 Oct 2026 00:00:00 GMT https://provisore.com/blog/deploy-swift-server-ubuntu https://provisore.com/blog/deploy-swift-server-ubuntu Install Swift with swiftly, build Vapor or Hummingbird in release mode, and run it under systemd behind Nginx with TLS and zero-downtime releases. Tue, 20 Oct 2026 00:00:00 GMT https://provisore.com/blog/deploy-node-vps-systemd https://provisore.com/blog/deploy-node-vps-systemd Run Next.js, Nuxt or any Node server on Ubuntu as a systemd service behind Nginx, with per-project Node versions, restarts, logs and TLS. No PM2. Tue, 20 Oct 2026 00:00:00 GMT https://provisore.com/blog/certbot-nginx-ubuntu https://provisore.com/blog/certbot-nginx-ubuntu Install certbot, issue a certificate for Nginx, confirm the renewal timer, and avoid the two-certbots trap. For Ubuntu 26.04 and 24.04. Tue, 20 Oct 2026 00:00:00 GMT https://provisore.com/blog/leave-heroku https://provisore.com/blog/leave-heroku What Heroku's 2026 change means, and how to move a Laravel or Node app to a VPS: Postgres, Redis, workers, scheduler, config vars and DNS, in order. Tue, 20 Oct 2026 00:00:00 GMT