Pema Hosting

Your AWS account. Our Linux expertise.

You open the AWS account and keep full ownership. We build, secure and run the Linux servers inside it, so you can spend your time on the application instead of the operating system.

Tell us about your project

Linux system administration since the 1995.

Your applicationYour site, your code, your customers
You
The server Everything between AWS and your application
LinuxDNSMailNGINXApacheTLSFirewallUpdatesBackupsMonitoring
Pema Hosting
AWS infrastructureEC2, networking, data centers, billing
AWS

The system administration work, done for you

AWS gives you a bare virtual machine. Turning it into a dependable server takes real Linux work, and that is the part we take on.

Linux servers

AlmaLinux, Rocky, RHEL, Debian or Ubuntu, installed and hardened: SSH keys only, SELinux or AppArmor, firewall rules, fail2ban and automatic security updates.

DNS

Authoritative BIND servers with primary and secondary name servers, zone management, reverse DNS and DNSSEC. Route 53 too, if you prefer it.

Mail

Postfix and Dovecot with SPF, DKIM and DMARC, spam filtering and backup MX. We also handle the AWS port 25 and reverse DNS requests so your mail gets delivered.

NGINX and Apache

Virtual hosts, reverse proxies, Let's Encrypt certificates, PHP, caching and security headers. NGINX in front of Apache when your application needs both.

Security and monitoring

Security groups kept tight, log review, intrusion detection, and CloudWatch alarms. Optional protection with DAV NGWAF, our own web application firewall.

Cost control

Right-sized instances, Elastic IPs and storage that you actually use, and billing alarms that warn you before a surprise invoice does.

Choosing the right EC2 instance

AWS offers hundreds of instance types. We match the family and size to what your server really does, and change it as your needs grow.

FamilyGood forExamples
BurstableSmall websites, DNS servers, backup mail and light workloads that sit idle most of the dayt4g t3
General purposeApplication servers and busy websites with a steady mix of CPU and memorym7g m7i
Compute optimizedHigh-traffic NGINX, API servers, encoding and other CPU-heavy workc7g c7i
Memory optimizedDatabases, caches and applications that keep large data sets in memoryr7g r7i

Instance types ending in g run on AWS Graviton (ARM) processors and usually cost less for the same work. Most Linux software runs on them without changes, and we test yours before switching.

How it works

You keep the account and the keys. If you ever stop working with us, there is nothing to migrate.

  1. You open the AWS account

    In your name, with your payment method. AWS bills you directly, with no markup from us.

  2. You grant us access

    A limited IAM role created for our work. You can review or revoke it at any time.

  3. We build the server

    We choose the instance, install Linux and set up DNS, mail and your web server, then document everything.

  4. We keep it running

    Updates, backups, monitoring and fixes, while you focus on your application.

We run on what we sell

This page is served from the same kind of setup we build for customers, on our own AWS account.

  • AlmaLinux on a Graviton t4g instance
  • NGINX in front of Apache, with Let's Encrypt
  • BIND name servers for our own domains
  • Postfix backup MX for several domains
  • CloudWatch traffic alarms with automatic cost limits

Ready to move your server to AWS?

Tell us what you run today and where you want to go. We reply to every real inquiry within one business day.

Tell us about your project