Securing phpMyAdmin in DirectAdmin

Introduction This guide explains how to properly secure Directadmin phpMyAdmin in your Novacloud instance, covering access control, authentication, IP restrictions, and integration with DirectAdmin’s SSO session.   In a standard DirectAdmin environment, phpMyAdmin is accessible via https://domain.com/phpmyadmin or https://domain.com/pma. While this makes database management easy for users, it also poses a major security risk if left

Enabling and Enforcing Two-Factor Authentication (2FA) in DirectAdmin (GUI)

Introduction This guide explains how to enable and configure Two-Factor Authentication (2FA) in DirectAdmin (Evolution Skin) for Admin.   Enabling 2FA is a critical step in reducing account takeover risks, especially in legacy environments where users may still rely solely on username and password login. Legacy systems lacking additional authentication mechanisms are increasingly vulnerable to

Performing Routine Maintenance – System Updates and DirectAdmin Software Update

Introduction This guide explains the step to secure your server in your Novacloud instance by updating your server’s operating system packages and Directadmin Software components.   Performing regular updates ensures improved performance, enhanced security, and compatibility with the latest features and services. This process is especially important for ensuring stability in hosting environments.   Keeping both

Securing Web Traffic using Modsecurity and Cloudflare

Introduction This guide explains how to secure your website in your Novacloud instance by adding Modsecurity (Layer 7 WAF) alongside Cloudflare (WAF + CDN).   Traditional Firewall operate at layer 3 / 4 (IP / Port), block traffic based on source IP, port or protocol. Modsecurity operate at layer 7 (Application), inspects HTTP requests to detect

Securing Web Traffic using Modsecurity

Introduction This guide explains how to secure your website in your Novacloud instance by adding Modsecurity   Traditional Firewall operate at layer 3 / 4 (IP / Port), block traffic based on source IP, port or protocol. Modsecurity operate at layer 7 (Application), block traffic based on patters in the HTTP request. Prerequisites Access to your

NovaGPU – Deploy GPU-Accelerated LLMs with Docker, Ollama & OpenWebUI on Ubuntu 24.04

NovaGPU – Deploy GPU-Accelerated LLMs with Docker, Ollama & OpenWebUI on Ubuntu 24.04   Introduction This guide provides a step-by-step setup to deploy a GPU-accelerated environment in NovaCloud using NovaGPU on Ubuntu 22.04. It includes installation and configuration of NVIDIA drivers, Docker, NVIDIA Container Toolkit, Ollama (for running large language models), and OpenWebUI (a user-friendly

Restrict Access to NovaCloud using Security Group

Introduction This guide explains how to secure access to your Novacloud instance by configuring security groups with restricting access to only trusted IPs.   Prerequisites Access to customer portal    What is Trusted IP? A trusted IP refers to an IP (IP address or CIDR block) that has been explicitly identified as safe, permitted and

Fortigate Disable a VPN User

Overview This guide outlines the steps to disable a specific VPN user configured on a Fortinet FortiGate hardware firewall. Disabling a local user account will effectively block VPN access if the VPN is authenticated against the local user database. This is administrative task in secure access management, to ensure least privilege and access revocation in