SERVER

VPS Server Setup

Configure and provision your VPS at 51.195.110.5

Download Full Script

VPS IP

51.195.110.5

SSH Port: 2299

VPN Subnet

10.1.51.0/24

Server: 10.1.51.1 | Port: 51866

RADIUS

1812 / 1941

CoA: 3799

Domain

qserve-isp.net

Syslog: 1940

Quick Start

# SSH into your VPS

ssh -i ~/.ssh/id_rsa ubuntu@51.195.110.5

# Download and run the setup script

curl -sL https://qserve-isp.net/downloads/server/full-setup.sh -o setup.sh

chmod +x setup.sh && sudo ./setup.sh

What Gets Installed

Security Hardening

  • SSH key-only auth (port 2299)
  • Fail2Ban intrusion prevention
  • UFW firewall with strict rules
  • Kernel security tuning
  • Automatic security updates

WireGuard VPN

  • Server on 10.1.51.1:51866
  • Subnet: 10.1.51.0/24
  • Auto peer management scripts
  • NAT and routing configured

FreeRADIUS

  • PostgreSQL backend
  • Auth: 1812, Acct: 1941
  • CoA/Disconnect: 3799
  • NAS client auto-registration

Web & SSL

  • Nginx reverse proxy
  • Let's Encrypt SSL certs
  • 6 domains/subdomains
  • WebSocket support for LiveView

Architecture

┌──────────────────────────────────────────────────────────┐
│  VPS: 51.195.110.5 (qserve-isp.net)                   │
│                                                          │
│  ┌─────────┐  ┌───────────────┐  ┌──────────────────┐   │
│  │  Nginx   │  │   Phoenix     │  │   FreeRADIUS     │   │
│  │  :80/443 ├──┤   :4000       │  │   :1812/1941      │   │
│  └─────────┘  │   LiveView    │  │   PostgreSQL     │   │
│               └───────────────┘  └──────────────────┘   │
│  ┌─────────────────────┐  ┌─────────────────────────┐   │
│  │  WireGuard wg0      │  │  Syslog Receiver        │   │
│  │  10.1.51.1:51866     │  │  UDP :1940              │   │
│  │  Subnet: 10.1.51.0/24 │  │  /var/log/qserve/       │   │
│  └──────────┬──────────┘  └─────────────────────────┘   │
│             │ VPN Tunnel                                 │
└─────────────┼────────────────────────────────────────────┘
              │
    ┌─────────┴─────────┐
    │                   │
┌───┴───┐         ┌────┴────┐
│Router1│         │Router2  │
│10.1.51│.2       │10.1.51.3│
└───┬───┘         └────┬────┘
    │                  │
[Clients]          [Clients]