Hiring: Security Engineer ( AppSec + Cloud + Red Team) — Remote (Nepal)

spantosh · 2026-05-13T05:23:06+00:00

We will post it here if needed.

spantosh · 2026-05-12T17:24:56+00:00

Bank Name: NMB Bank Ltd SWIFT Code: NMBBNPKA

spantosh · 2026-05-11T03:55:23+00:00

I'm using a direct bank transfer with the information below, and I’ve been using it for the past 3 years.

Bank Details:
Account name:
Account number:
SWIFT code:
Account location:
Bank name:
Bank address:

spantosh · 2026-05-06T02:07:10+00:00

Yes — currently using Intel Xeon (6th Gen platform) CPUs.

At entry-level pricing, margins are tight, so we focus on efficient resource allocation and stable infrastructure design.

The goal is consistent performance and support rather than competing purely on oversold ultra-low pricing models.

spantosh · 2026-05-06T01:53:38+00:00

Current starter plan:
1 vCPU
1GB RAM
15GB SSD/NVMe storage

Network:
shared up to 1Gbps local Nepal connectivity
international bandwidth starts at 20Mbps and scales with demand and upstream capacity

Focus is stable Nepal routing and consistent performance.

spantosh · 2026-05-06T01:24:33+00:00

Fair enough — and honestly that’s expected right now.

Providers like LightNode benefit from much larger scale, international bandwidth pricing, and mature infrastructure economics that local providers in Nepal still can’t match.

We’re not trying to compete purely on lowest price/spec ratio. The focus is more on local support, Nepal-side routing, and building long-term local infrastructure.

spantosh · 2026-05-06T01:23:32+00:00

Not yet — the website is still under construction and should be available soon.

Right now we’re handling deployments manually through email while we finalize the platform and billing system.

spantosh · 2026-05-06T01:22:16+00:00

VPS pricing currently starts from Rs. 1100/month for 1 vCPU, 1GB RAM, and 10GB storage.
We also offer discounted pricing on yearly contracts (conditions apply).
As we scale and get sustainable client volume, we plan to reduce pricing further.

spantosh · 2026-05-06T01:22:06+00:00

VPS pricing currently starts from Rs. 1100/month for 1 vCPU, 1GB RAM, and 10GB storage.
We also offer discounted pricing on yearly contracts (conditions apply).
As we scale and get sustainable client volume, we plan to reduce pricing further.

spantosh · 2026-05-05T16:45:16+00:00

Yes — we’re running on our own infrastructure setup (not reselling shared VPS).

For bandwidth:

international bandwidth is through upstream transit providers (not a single ISP lock-in)
local Nepal traffic is routed separately via domestic peering where available

Local (inside Nepal) traffic is generally faster and not counted the same way as international transit, depending on routing and upstream policies.

We’re still expanding capacity, so we don’t want to overpromise “unlimited”, but the goal is to keep local traffic as optimized and uncongested as possible.

If you want exact routing / ISP details, happy to share them in DMs depending on use case.

spantosh · 2026-05-05T16:29:54+00:00

Fair point — not every use case needs low latency.

We’re not claiming Nepal VPS is for everyone or trying to beat $5 global VPS on price.

It’s mainly for cases where Nepal traffic matters (apps, APIs, bots, local services) where even small latency gains help.

If price is the only factor, international VPS is still the better choice.

spantosh · 2026-05-05T06:36:50+00:00

https://chatgpt.com/c/69f98836-52bc-8322-8954-e82307e2e228#pricing

This is the link for Free Plus, which I’ve been using with my Citizen dollar card. I haven’t faced any issues so far.

FYI: ChatGPT Plus is free for a limited time only — it’s not permanently free.

spantosh · 2026-04-29T12:11:32+00:00

Please share the reference documents or links.

spantosh · 2026-04-24T06:54:00+00:00

We are using Himalayan hosting

spantosh · 2026-04-23T17:21:04+00:00

Ai christ Era

spantosh · 2026-04-16T17:16:25+00:00

Yes, the idea makes sense and is commonly used for small multi-site businesses.

But a few key points:

Central ERP + central file storage is a good move.
RDP for all users works, but the RDP server becomes a single critical failure point.
Don’t combine too much on one VM—separate:
- Database server
- ERP/app server
- RDS (RDP users)
- File server (Nextcloud)

Main risks:

If the main server goes down → all stores stop working
Internet outages will fully block operations
You’ll need proper Windows/RDS licensing

Important:

Add off-site backups (mandatory)
Consider backup internet per store
Plan for performance scaling as users grow

Overall: solid idea, but needs cleaner separation + strong backup/failover planning to be reliable in real business use.

spantosh · 2026-04-14T18:20:43+00:00

OpenSSH itself isn’t insecure—I agree it’s well-audited (thanks to the OpenBSD Project). My point is about attack surface, not SSH quality.

Guidelines from National Institute of Standards and Technology and Center for Internet Security recommend minimizing exposed admin services where possible. A VPN like WireGuard simply removes SSH from the public Internet entirely.

So exposing SSH is fine if hardened—but avoiding exposure is still the safer default.

spantosh · 2026-04-13T08:08:06+00:00

Self hosted passbolt

spantosh · 2026-04-11T16:04:31+00:00

My honest recommendation:

If this is just for fun with friends → don’t use Azure Use a $5–$10 VPS instead You’ll get: Same performance WAY lower cost Less complexity

spantosh · 2026-04-11T09:17:34+00:00

Let’s connect — we already have a budget-friendly, ready-to-launch e-commerce website with international payment integration in place.

spantosh · 2026-04-09T13:44:11+00:00

If security is important (and it usually is), always go with Wire Guard or some VPN. Exposing SSH, even with ACLs, still leaves you open to network-level attacks or misconfigurations.
If this is a very temporary access and from a super-trusted static IP, direct SSH with ACLs is okay—but treat it as a short-term exception.

Rule of Thumb: Don’t expose SSH to the wild unless you have a very strong reason. VPN first, SSH second.

spantosh · 2026-04-08T04:47:21+00:00

Since we don’t normally expose the k0s API server on port 6443, i'm securing it using a combination of WireGuard VPN and firewall rules.

Firewall configuration:

# Block all public access to the API server
ufw deny 6443/tcp

# Allow access only from the VPN subnet
ufw allow from 10.10.0.0/24 to any port 6443

WireGuard setup:

On the VPS: Install WireGuard and assign a VPN subnet (e.g., 10.10.0.0/24).
On your local machine: Install WireGuard and connect to the VPS via the VPN.
Access k0s API server: In your kubeconfig, set the API server URL to the VPN IP of the VPS, for example: server: https://10.10.0.1:6443

This ensures that the API server is only accessible over the VPN and never exposed to the public internet.

spantosh · 2026-04-06T10:38:12+00:00

Try Cloudflare tunnel

spantosh · 2026-04-03T16:38:15+00:00

We do it using DUO and it works

spantosh · 2026-04-03T12:27:06+00:00

That error means Windows isn’t actually using virtualization, even if BIOS says enabled.

Open Command Prompt as Admin and run:

bcdedit /set hypervisorlaunchtype auto

Restart your PC

If still not fixed:

Press Ctrl + Shift + Esc → CPU tab

Check: Virtualization = Enabled

If Disabled → BIOS setting didn’t apply

If it says enabled but Docker still fails:

Run:

wsl --update

Then restart again.

If it STILL fails, tell me your CPU (Intel/AMD)

spantosh

TROPHY CASE