PaaS & CI/CDMin. specs: 4 Dedicated Cores, 8 GB DDR5 ECC, 128 GB NVMe

Coolify Self-Hosted PaaS — Recommended Netcup server & voucher

Coolify compiles Docker images directly on the host. Dedicated AMD EPYC 9645 cores on RS 1000 G12.5 cut Next.js/Rust/Go build times by 45% with 0.0% CPU Steal.

Reference Docker stackcoolify-realtime + traefik-proxy + postgres-16 + redis-alpine
Estimated workload capacity12–18 containerized web apps + automated DB backups

Partner notice: we may receive a commission when you order through our links. The price you pay does not change.

Primary production choice

RS 1000 G12.5

Root server • G12.5
2 Months Free
€21.73/ moincl. 19% VAT

4 Dedicated Cores (AMD EPYC 9645) · 8 GB RAM · 128 GB NVMe · 2.5 Gbit/s

GB6: 2,290/7,559 · FIO 4K: 187,300 IOPS · Steal: 0.0 %

6874nc17927037720
Redeem ↗
✓ Verified Code (22/10/2026)Backup €5 voucher: 36nc17927037630
Budget / starter alternative

VPS 1000 G12.5

VPS • G12.5
1 Month Free
€14.50/ moincl. 19% VAT

4 vCores (x86) · 8 GB RAM · 128 GB SSD · 2.5 Gbit/s

GB6: 1,720/4,650 · FIO 4K: 130,000 IOPS · Steal: 1.2 %

6877nc17927037790
Redeem ↗
✓ Verified Code (22/10/2026)Backup €5 voucher: 36nc17927037630
Production Engineering Guide

Engineering Guide: Running Coolify Self-Hosted PaaS on Netcup Infrastructure

Recommended kernel parameters, memory management, and security hardening for maximum reliability.

1

Memory Management & Swappiness

Add a 4–8 GB swapfile and set "sysctl vm.swappiness=10" to prevent the Linux OOM Killer from terminating container processes during memory allocation spikes.

2

SMTP Port 25 for Alerts

If your app sends notification emails: delete the "netcup Mail block" rule in SCP Firewall and configure a clean reverse DNS (rDNS/PTR) record matching your domain.

3

Persistent Storage & Offsite Backups

Mount application state into named Docker volumes. Automate daily offsite backups using BorgBackup or Restic — remember SCP snapshots expire automatically after 30 days.

4

Firewall & SSH Port Hardening

Keep UFW active allowing only ports 80 and 443 publicly. Shift SSH from port 22 to a custom high port to eliminate automated credential stuffing scan noise.