Everyday use and upkeep

Congratulations — the main guide is done

Once configured, the server basically runs itself: the certificate is checked every 6 hours and renewed before it expires, routing rules update daily, the AI API updates itself, and the configuration is backed up daily (7 copies kept).

This page covers everyday habits and what to do when something goes wrong.

One small security task first

Change the root password in the provider’s dashboard (see Change the root password). The server no longer accepts passwords for remote login, but the provider’s rescue console may still accept it — and it appeared in the server-ready email.

Everyday use

• Computer: keep Clash Verge running, in Rule mode with Tun Mode on.
• Phone: turn on Shadowrocket’s switch when needed.
• Nodes: normally use name-Reality; if it fails, the app’s “auto switch” moves to name-TLS, or pick it yourself.
• Updating the subscription: apps refresh it automatically. If you hear the setup’s rules were updated, tap “Update” once.
• Switch less: stick to the same server rather than hopping between countries — friendlier for AI accounts.

Regular health checks

Every so often, or whenever something feels off, have AI check the server. Send this to the AI (replace bwg with your name):

Please check my server with the "xiaoxiaodong VPS" setup: ssh bwg

Setup: https://github.com/nevertoday/xiaoxiaodong-vps
Download the project and read the "以后的复核和维护" (later checks and maintenance) part of skills/xiaoxiaodong-vps/SKILL.md.
Only check first, tell me which items failed and why, and fix them only after I agree.
Don't show passwords, subscription URLs or keys in the chat. Please reply in English.

Without AI, run this in the setup folder:

cd xiaoxiaodong-vps/skills/xiaoxiaodong-vps
git pull
bash scripts/local/remote.sh bwg upload
bash scripts/local/remote.sh bwg verify --full

More: Have AI health-check your server.

When something breaks, check in this order

1. Try another network: mobile data, other Wi-Fi. If only one network fails, the problem is that network.
2. Try the other node: pick it manually in the app.
3. Health-check the server as above and see which item fails.
4. Everything passes but it still won’t connect: the IP has probably been restricted locally. Configuration can’t fix that — ask the provider for a new IP (see Check traffic and change the IP), then have AI reconfigure the server.

Before you travel

Go through the before-you-travel checklist, at the latest the day before you leave.

Traffic and renewals

• Traffic: see this month’s usage in the provider’s dashboard. If you told the AI your quota and reset day, the apps show it too. Speed tests eat traffic — don’t run them often.
• Renewal: turn on auto-renew in the provider’s dashboard or put the expiry date in your calendar. An expired server is suspended, then deleted, and its IP reclaimed.

Setting up another server

Want a second server (a backup, or for another region)? Go through the guide again from step 1 — much faster the second time. Every server gets its own passwords, keys and subscription URLs.

Stuck?