VPS setup for vibe coders

Turn a fresh Ubuntu VPS into something you can run production software on, and prototype quickly against, without leaving an open door.

The target architecture: nothing listening publicly except SSH. Web traffic arrives through a Cloudflare Tunnel, so there are no inbound ports and the origin IP never appears in DNS.

Internet → Cloudflare (terminates TLS) → tunnel → cloudflared → Traefik → containers
                                                                    ↓
                                                  internal network: PostgreSQL, Redis

Philosophy — read this before recommending anything