iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
Build the bot with Slack’s official Bolt for Python framework, connect it through Socket Mode unless you specifically need a public HTTP endpoint, and run it as a dedicated systemd service on your VPS. The practical production setup uses a bot token for Web API calls, an app-level token for Socket Mode, environment variables for secrets, a least-privilege Linux account, a restricted firewall, automatic security updates, and logs that you can inspect after every restart.
This guide takes you from Slack app creation to a supervised Ubuntu deployment, then covers HTTP mode, security, retries, updates, and recovery.
What you are building
A Slack bot has three separate pieces:
- Slack app: the configuration and permissions installed in a workspace.
- Python process: your event listeners and calls to Slack’s Web API.
- VPS service: the Linux host that keeps the process running after you disconnect from SSH.
For a small, single-workspace bot, Socket Mode is usually the simplest delivery path. Slack opens a WebSocket connection to your process, so the VPS makes outbound connections and does not need a public application port. If you already operate a public web service, need a stable Request URL, or expect a broadly distributed application, use HTTP mode instead.
Bolt for Python is the official framework designed for this work. Slack’s April 14, 2026 Python development article reported 8.6 million monthly downloads for the Python Slack SDK and 1.5 million monthly downloads for Bolt for Python. Those figures indicate adoption, not a performance or uptime guarantee.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
Create and install the Slack app
Start in a development workspace
Create the app in a workspace where you can safely test events and permissions. Add only the bot scopes required by your features. A command that only responds to messages should not receive broad read or write access to unrelated resources.
Install the app to the workspace after selecting its bot scopes. Installation produces a bot token beginning with xoxb-. The bot token authorizes Web API calls made as the app’s bot user.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Create the app-level token for Socket Mode
Socket Mode requires a separate app-level token beginning with xapp-. Generate it with the connections:write scope. Most single-workspace Socket Mode bots therefore use one xoxb bot token and one xapp app-level token.
Slack’s official guidance is direct: “Treat your tokens like passwords and keep them safe.” Do not put either token in a Git repository, issue, screenshot, shell history copied into tickets, or a client-side bundle. Store them as environment variables or in a root-readable environment file on the server.
Choose event permissions deliberately
Subscribe only to the Events API events and interactive features your listeners need. A message listener, for example, may require a message-related event and a matching bot scope. If the bot must post in channels, add the posting scope; if it only replies where it was mentioned, do not grant broader channel access by default.
After changing scopes or event subscriptions, reinstall the app when Slack requests it. Test in a private development channel before adding the bot to production channels.
Create the Python project
Use an isolated virtual environment
The official Bolt repository documents Python 3.7 or newer. On the VPS, use a currently supported Python interpreter supplied by your Linux distribution or an approved runtime package. Create a project directory owned by the deployment account, then create and activate a virtual environment:
mkdir -p /opt/slackbot
cd /opt/slackbot
python3 -m venv .venv
source .venv/bin/activate
python -m pip install -U pip slack_boltKeep the virtual environment inside the application directory so the service can invoke one explicit interpreter. Record the installed versions after the first successful deployment:
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
python -m pip freeze > requirements.lockThe lock file is a deployment record. Review and regenerate it when you intentionally update Bolt or another dependency rather than changing packages ad hoc on the server.
Write a minimal Socket Mode bot
Create /opt/slackbot/app.py with this small working example:
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsimport os
from slack_bolt import App
from slack_bolt.adapter.socket_mode import SocketModeHandler
app = App(token=os.environ['SLACK_BOT_TOKEN'])
@app.message('hello')
def message_hello(message, say):
say(f"Hey there <@{message['user']}>!")
if __name__ == '__main__':
SocketModeHandler(app, os.environ['SLACK_APP_TOKEN']).start()The App object receives the bot token for Web API operations. SocketModeHandler uses the app-level token to obtain and maintain Slack’s WebSocket connection. The @app.message decorator registers a listener that responds when a matching message arrives.
Add listeners without blocking acknowledgements
Bolt also supports decorators such as @app.event for Events API events. Keep listener work short enough to acknowledge Slack promptly. For slow jobs, acknowledge or respond first, then hand the long operation to a queue or worker that you control. A handler that waits on a slow external operation can cause delivery failures and retries.
Make handlers idempotent. Slack can retry an Events API delivery when a request fails, times out, or is otherwise not acknowledged. Use the event’s identifiers or your own durable state to ensure a repeated delivery does not create duplicate records, duplicate messages, or repeated side effects.
Choose Socket Mode or HTTP mode
The right transport depends on the network shape you need, not on Python syntax. Both modes can use Bolt listeners.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →| Decision point | Socket Mode | HTTP mode |
|---|---|---|
| Inbound exposure | No public application listener is required; the VPS initiates an outbound WebSocket. | Slack must reach a public HTTPS Request URL. |
| Slack configuration | Enable Socket Mode and create an app-level token with connections:write. |
Configure Event Subscriptions and set the Bolt endpoint, commonly /slack/events. |
| Domain and TLS | No bot-specific public domain or certificate is needed. | Requires a stable domain, TLS certificate, reverse proxy, and certificate renewal. |
| Firewall compatibility | Usually works when outbound HTTPS/WebSocket traffic is allowed and inbound access is limited to SSH. | Requires an inbound HTTPS rule and coordinated cloud and host firewall rules. |
| Scaling architecture | Simple for one process; plan connection ownership carefully when adding replicas. | Fits established reverse proxies, load balancers, and horizontally scaled web services. |
| Marketplace and distribution | Slack’s legacy Socket Mode page says these apps are not currently allowed in the public Marketplace; verify the current policy before relying on that limitation. | Use the HTTP model when public distribution requirements make Socket Mode unsuitable. |
When Socket Mode is the better VPS choice
Choose Socket Mode when the bot lives in one workspace, the VPS does not already serve a public web application, and you want to avoid exposing another inbound port. Slack creates and refreshes the WebSocket URL at runtime. Your process only needs to reach Slack over the network; Slack does not need to initiate a connection to your server.
This reduces domain, TLS, reverse-proxy, and inbound-firewall work. It does not remove the need for reliable outbound DNS, HTTPS/WebSocket access, token protection, process supervision, or event-retry handling.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
When HTTP mode is the better fit
Use HTTP mode when you already run a public service, need a stable Request URL, or plan an architecture with a reverse proxy and load balancing. Configure Slack’s Event Subscriptions Request URL to the Bolt path, commonly /slack/events, and provide the app’s signing secret to Bolt so incoming requests can be verified.
Put the Bolt application behind a TLS-terminating reverse proxy. Expose only the required HTTPS port publicly, forward requests to the local Bolt process, and keep the signing secret in the same protected environment mechanism used for other credentials. Socket Mode and HTTP mode are alternatives for event delivery; do not expose an unnecessary public endpoint just because the bot is hosted on a VPS.
Provision and harden the Linux VPS
Create a dedicated account
Start with a current Ubuntu Server image or another supported Linux distribution. Create a non-root account for deployment and maintenance. Grant administrative privileges only through the controlled elevation mechanism needed for setup; run the bot itself as a dedicated account such as slackbot.
A dedicated account limits the damage from a compromised dependency or application bug. It should own the application files it must read and write, but it should not have unrestricted access to system configuration, other users’ home directories, or private keys.
Configure SSH and the firewall safely
Ubuntu identifies ufw as its default firewall configuration tool. Before enabling it, confirm that the rule matches your real SSH port and access path. A basic setup is:
sudo ufw allow OpenSSH
sudo ufw enable
sudo ufw status verboseFor Socket Mode, allow SSH and the outbound HTTPS/WebSocket traffic required by the host. Do not open a public bot listener merely to run Socket Mode. For HTTP mode, allow the HTTPS port used by the reverse proxy in addition to SSH. Apply equivalent rules in the cloud provider’s security group; a permissive cloud rule can negate a restrictive host firewall, and a restrictive cloud rule can make a correct host rule ineffective.
Recommended Free Tools
Keep the operating system patched
Ubuntu says unattended-upgrades is installed by default for automatic security updates and normally runs daily through systemd timers. Review its logs, reboot policy, and service-restart behavior. An update can restart the host, Python runtime, reverse proxy, or another dependency, so schedule maintenance when a short bot interruption is acceptable and confirm the service returns afterward.
Deploy secrets and application files
Use a root-owned environment file
Create a directory for service secrets and make the file readable only by root:
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
sudo install -d -m 0750 -o root -g root /etc/slackbot
sudo install -m 0600 -o root -g root /dev/null /etc/slackbot/slackbot.env
sudoedit /etc/slackbot/slackbot.envPut the required values in the file:
SLACK_BOT_TOKEN=xoxb-replace-with-your-bot-token
SLACK_APP_TOKEN=xapp-replace-with-your-app-tokenFor HTTP mode, include the signing secret using the variable name expected by your Bolt configuration, for example SLACK_SIGNING_SECRET, and initialize the app with it. Do not commit this file or copy its contents into a public diagnostic report. The application directory can contain source, the virtual environment, and a dependency lock file; it should not contain live credentials.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Check ownership and paths
Ensure the service account can read /opt/slackbot and execute the virtual-environment interpreter, while it cannot modify the root-owned environment file. Test the exact interpreter and script as the service account before creating the service:
sudo -u slackbot /opt/slackbot/.venv/bin/python /opt/slackbot/app.pyStop it with the normal interrupt after confirming that it connects. If the process exits immediately, inspect the missing-variable or permission error before moving to systemd.
Keep the bot running with systemd
Systemd is Ubuntu’s native service manager for long-running processes. Create /etc/systemd/system/slackbot.service:
[Unit]
Description=Slackbot
After=network-online.target
Wants=network-online.target
[Service]
Type=simple
User=slackbot
WorkingDirectory=/opt/slackbot
EnvironmentFile=/etc/slackbot/slackbot.env
ExecStart=/opt/slackbot/.venv/bin/python /opt/slackbot/app.py
Restart=on-failure
RestartSec=5
[Install]
WantedBy=multi-user.targetThe explicit ExecStart path prevents systemd from accidentally using a different Python installation. Restart=on-failure brings the bot back after an unexpected exit, while the five-second delay avoids a tight restart loop.
Load, enable, and inspect the service:
sudo systemctl daemon-reload
sudo systemctl enable --now slackbot
sudo systemctl status slackbot
sudo journalctl -u slackbot -fenable --now starts the service immediately and configures it to start at boot. The status output shows whether systemd considers it active. The journal follows live output and is the first place to look for import errors, missing variables, authentication failures, connection failures, and repeated restarts.
Use service logs as an operational signal
Write useful, structured messages for startup, successful connection, handler failures, and shutdown. Alert on repeated restarts rather than assuming that systemd’s restart policy means the bot is healthy. A process that starts, fails authentication, and restarts forever is technically supervised but operationally broken.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Test the deployment end to end
- Verify installation: Confirm the app is installed in the intended workspace and that the bot appears in the test channel.
- Verify credentials: Check that the service account can read the application and that only the root-owned environment file contains live tokens.
- Verify transport: For Socket Mode, confirm the journal shows a successful connection without requiring an inbound listener. For HTTP mode, send a test event through the configured HTTPS Request URL and confirm the reverse proxy forwards the request to
/slack/events. - Verify listeners: Send the exact message or event that a listener handles and confirm one response.
- Verify restart recovery: Run
sudo systemctl restart slackbot, then inspect status and logs and send another test event. - Verify boot recovery: After planned maintenance, confirm the service starts automatically and reconnects without manual SSH intervention.
Test failure paths as well as the happy path. Remove or temporarily invalidate a token in a controlled environment to confirm the error is visible in logs, then restore the valid value and restart the service. Do not test credential failures in a production channel where users could see diagnostic output.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Handle retries, updates, and token rotation
Design for Slack retries
The Events API can retry deliveries when a request fails. A handler should acknowledge quickly, avoid doing the same irreversible work twice, and record enough event identity to recognize duplicates. This matters most for HTTP mode, where request timeouts and reverse-proxy limits can prevent Slack from seeing a timely acknowledgement, but the same idempotency principle is useful for Socket Mode listeners.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rotate credentials without exposing them
Plan token rotation before a token is leaked or an administrator leaves the project. Generate the replacement in Slack, update the protected environment file, verify its ownership and mode remain 0600, then restart the service:
sudo systemctl restart slackbot
sudo systemctl status slackbot
sudo journalctl -u slackbot -n 100 --no-pagerAfter confirming the new credential works, revoke the old one in Slack. If a token was committed or exposed, treat it as compromised: revoke it promptly, remove it from the repository’s active history where appropriate, and inspect logs for unauthorized use. Deleting a line from the latest commit does not make a previously published token safe.
Update dependencies deliberately
Record the current package versions, review Bolt and Python release notes, and update in a maintenance window. Install updates in the virtual environment, regenerate requirements.lock, restart the service, and exercise the same event tests used for the initial deployment. Keep the previous source and dependency record available so you can restore a known-good version if a listener or adapter changes behavior.
Back up what the bot needs
Back up the source code, dependency lock file, environment-file template without secret values, systemd unit, reverse-proxy configuration if using HTTP mode, and any persistent state. Store real secrets in a protected secret-management or administrative backup process rather than an ordinary source archive. Test a rollback procedure whenever you upgrade Python, Bolt, or the operating system.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Troubleshoot by symptom
The service exits immediately
- Run
sudo journalctl -u slackbot -n 100 --no-pagerand read the first traceback, not only the final restart message. - Confirm
ExecStartpoints to the virtual environment’s Python and thatWorkingDirectorycontainsapp.py. - Check that both required Socket Mode variables exist in the environment file and that the service account can access the application files.
The bot starts but never receives messages
- Confirm the app is installed in the workspace and the bot is present in the channel where you are testing.
- Check that the relevant event subscription and bot scope were added, then reinstall the app if Slack requested it.
- For Socket Mode, inspect logs for WebSocket or authentication errors and verify outbound connectivity.
- For HTTP mode, verify DNS, TLS, the cloud security group,
ufw, reverse-proxy forwarding, and the exact/slack/eventspath.
Slack appears to deliver the same event twice
Inspect acknowledgement timing and proxy timeout logs, then add idempotency keyed to the event identifier or another durable request identity. Do not “fix” duplicates by blindly dropping all messages; determine whether the repeated delivery is a legitimate retry or a real duplicate event.
The bot works in SSH but stops after disconnect
A foreground command tied to your terminal is not a deployment. Stop that copy and run the application through the enabled systemd unit. Confirm systemctl status slackbot remains active after closing SSH and that the journal continues to receive startup and connection messages.
Firewall changes lock you out
Do not enable ufw until an SSH rule matches the actual port and access path. If access is lost, use the VPS provider’s out-of-band console to restore a correct SSH rule, then review the cloud security group and host firewall together.
Production readiness checklist
- The Slack app is installed in the intended workspace with only required scopes.
- The bot token and, for Socket Mode, app-level token are outside source control and loaded from a protected environment file.
- The bot runs as a dedicated non-root account.
- Socket Mode has no unnecessary public application port; HTTP mode has a TLS-protected reverse proxy and only the required HTTPS port exposed.
- SSH access was tested before enabling
ufw, and cloud and host firewall rules agree. - The systemd unit starts at boot, restarts on failure, and has been tested after a manual restart.
- Logs identify startup, connection, handler errors, and repeated restarts.
- Handlers acknowledge promptly and are idempotent against Slack retries.
- Automatic security updates, reboot behavior, and service recovery have been reviewed.
- Source, dependency records, configuration templates, and persistent state have a tested backup and rollback path.
- There is a documented procedure for rotating or revoking leaked tokens.
For the typical small Linux VPS bot, the shortest reliable path is therefore: install Bolt in a virtual environment, use Socket Mode with xoxb and xapp tokens, keep the secrets in a root-owned environment file, run the process under systemd as a dedicated user, and operate it with firewall, update, logging, retry, and rollback practices from the first deployment.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
