Nginx is one of the most useful tools on a VPS because it lets one public server route traffic to multiple apps. It can terminate TLS, handle hostnames, serve static assets and sit in front of containers, local services or app servers.

What a reverse proxy does

A reverse proxy receives public traffic first, then forwards requests to the correct local app based on hostname or path. That means you can run a dashboard, API, website and webhook receiver on one VPS without exposing each backend service directly.

example.com        -> localhost:3000
api.example.com    -> localhost:4000
status.example.com -> localhost:9000

How to structure it on HYEHOST VPS

  • Point DNS records at your VPS IPv4 or IPv6 address.
  • Install Nginx and create one server block per hostname.
  • Keep backend apps bound to localhost where possible.
  • Use automatic certificate renewal for HTTPS.
  • Use the firewall to expose only HTTP, HTTPS and required management ports.

Common mistakes

The most common mistake is exposing both the proxy and the backend app publicly. If Nginx is meant to be the public entry point, the app behind it should usually listen on localhost or a private address. Another common mistake is forgetting log rotation until access logs fill the disk.

HYEHOST note: Nginx, Docker Compose and a Self-Hosting VPS are a strong combination for small apps. Public apps get HTTPS; private tools get VPN or firewall-restricted access.