Your server. Your bill. Hardened, then handed over.
You pay DigitalOcean (a US region such as New York) or Hetzner when the data should sit in the EU. NexFlow never appears on that invoice. We harden the box the way we harden our own — SSH keys only, firewall, unattended upgrades, encrypted off-host backups, DNS and SSL — run a restore test, and hand you the keys. $750 USD, once. Optional care lives on the assistants page, not here.
If the server is the part you keep putting off, this is the entry step.
I know I should self-host, and I do not want to learn firewall rules on a Sunday.
I already pay for a VPS. I do not want another company in the middle of that bill.
I will not put customer data on a box until someone proves the backup actually restores.
Here is the handover, step by step.
A static walkthrough of a US-region harden-and-handover. No live console, and no secrets.
What it looks like for a US business like yours.
A server the owner already pays for, hardened, then handed back.
The owner wanted automation on infrastructure in their own name and did not want a weekend of Linux. We used their DigitalOcean account, New York region, locked SSH to keys, turned on the firewall and unattended upgrades, pointed DNS and SSL, stored encrypted backups off the box, and restored a copy before we left. The hosting invoice never moved.
Attributed result. Sourced, not a composite.
The production pattern: Compose-ready hardening, Postgres, Caddy, and a key you keep.
US buyers usually start on DigitalOcean in a US region. This Field Note is the EU value path we use when the data should sit in Europe, and the hardening checklist we follow either way. The Field Note documents a Hetzner CX22 at €4.51/month running n8n with Postgres 16 and Caddy, plus encrypted off-host backups. It also warns that the encryption key has to be set before the first run. Read the Field Note. Figures are from that note, not a quote for every box. If the server has to sit in Australia for residency, use the Australia self-host guide. That is not the default.
Simple to get going. We do the heavy lifting.
You keep the provider account. We do the hardening, prove the backup, and leave.
We use your provider account
DigitalOcean for a US region, or Hetzner when you want the box in the EU. You create the account, or we join the one you have. You pay them.
We harden it
SSH keys only, firewall, unattended upgrades, DNS and SSL, encrypted backups stored off the server.
We restore-test it
A backup that has never been restored is a hope. We run a restore before we hand the box over.
You keep the keys
Admin access, the backup location, and a short handover note. No NexFlow monthly on this page.
Everything you get, in plain English.
- Server on your DigitalOcean or Hetzner account
- SSH keys only, password login disabled
- Firewall and unattended security upgrades
- DNS and SSL for the hostname you choose
- Encrypted backups stored off the server
- A restore test before handover
- A short plain-English handover note
- No NexFlow hosting fee and no monthly on this page
Straight-up pricing. No surprises.
Every job starts with a quick 15-minute call so we both know it is a fit. If it is not right for you, we will tell you.
One-off harden and handover. You pay the provider for the server. Optional stack care is $450 USD/month on the AI assistants page, and it covers patch and backup watch. It is not sold here.
- Your provider account, US region or EU
- SSH keys, firewall, updates, DNS, SSL
- Encrypted off-host backups
- Restore test before we leave
- No NexFlow monthly on this service
Need n8n or an assistant on it?
VPS setup is the entry step. n8n host, the assistant install, and Odysseus can all run on the same box. Workflow automation and invoice processing can keep their data there too.
See full pricingQuestions people ask us.
How much does VPS setup cost?
NexFlow hardens and hands over a VPS for $750 USD one-off. You pay DigitalOcean or Hetzner for the server. There is no NexFlow monthly on this page. Optional stack care is $450 USD/month on the AI assistants page, and it covers patch and backup watch for the box.
Who pays the hosting bill?
You do. NexFlow does not resell the server and does not sit on your infrastructure invoice. US buyers usually start on DigitalOcean in a US region such as New York. UK and EU buyers who want the data in Europe usually use Hetzner. If you need the box in Australia for residency, say so on the call and we follow the existing Australia self-host guide. That is not the default.
What does hardened mean?
SSH keys only, a firewall, unattended security upgrades, DNS and SSL, encrypted backups stored off the server, and a restore test before we leave. You leave with the keys.
Can you put n8n or an assistant on it afterwards?
Yes. This is the entry step for the rest of the lane. n8n host, the AI assistants install, and Odysseus can run on the same server. Workflow automation and invoice processing can keep their working data on that box too.
A server you pay for. Keys in your hand.
Tell us whether the box should sit in a US region or in the EU. We will say honestly if $750 USD is the right first step.