Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
The reliable 2026 layout is simple: run Etherpad privately on a Linux VPS at 127.0.0.1:9001, place NGINX, Caddy, Traefik or another reverse proxy in front of it, and let that proxy handle your public hostname and TLS. Use the official Docker image for a reproducible deployment, or install from source when you need tighter control over plugins and Node dependencies.
The details that determine whether the installation remains usable are WebSocket forwarding, trustProxy when TLS ends at the proxy, and persistent database and file storage. The guide below takes you from an empty VPS to a collaborative, backed-up service and includes recovery checks for the failures that most often affect real-time editing.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWhat a production Etherpad VPS looks like
Etherpad normally listens on TCP port 9001. Do not expose that port directly to the Internet. A safer topology is:
Internet → firewall (80/443) → reverse proxy → 127.0.0.1:9001 (Etherpad)The proxy owns the public DNS name and HTTPS certificate, while Etherpad remains reachable only from the local machine. This arrangement also gives you one place to enforce HTTP security policy, inspect access logs and host additional services later.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application:Upgraded attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Warranty & Support: Our Electric air duster comes with 5 years warranty and 24/7 customer service. During this period, if you have any questions,pls kindly feel free to contact us.
The proxy must pass WebSocket Upgrade and Connection headers. Without them, Etherpad can silently fall back to slow long-polling or lose real-time collaboration altogether. If TLS is terminated at the proxy, set trustProxy: true in Etherpad so forwarded client-address and HTTPS information is trusted and secure cookies can be marked correctly.
Prepare the VPS before installing
- Use a current Linux VPS with administrative access and a static public address.
- Point a DNS name such as
pad.example.comat that address before requesting a certificate. - Allow inbound TCP 80 and 443 at the VPS firewall and provider firewall. Keep 9001 closed publicly.
- Choose where the database, uploaded files and plugin-managed files will live, and ensure that location is on persistent storage rather than a disposable container layer.
- Decide how you will back up the database and files, and how you will test a restore.
- Install Docker and Docker Compose if you are using containers, or the runtime and build tools required by the source installer.
Keep administration (SSH and any management panel) restricted to trusted addresses or an additional access control layer. Never publish a database listener to the public Internet merely because Etherpad is running on a VPS.
Choose Docker or a source installation
Both methods produce the same Etherpad service. The operational difference is how you reproduce, update and troubleshoot it.
| Decision area | Official Docker image | Source installation |
|---|---|---|
| Reproducibility | Pin an image tag and recreate the container with the same environment and mounted data. | Pin the Etherpad revision and the Node/plugin dependency set yourself. |
| Upgrades and rollback | Pull a tested tag, recreate the container, and return to the previous tag if needed. | Update the checkout and dependencies, then restore the prior revision and dependency state for rollback. |
| Plugin and Node control | Convenient defaults; custom plugins may require a derived image or mounted files. | Direct control over the checkout, plugins and installed dependencies. |
| Persistence | Explicit volume or bind mounts are required for the database and managed files. | Data remains in the host paths you configure, but you still need a documented backup policy. |
| Observability | Use container logs plus proxy and host logs. | Use the service process, host logs and proxy logs directly. |
For most first deployments, Docker is the easier path to reproduce on a second VPS. Choose source when your team already operates Node applications or must patch and integrate plugins at the filesystem level.
Option A: run the official Docker image
The official image is published as etherpad/etherpad on Docker Hub and mirrored as ghcr.io/ether/etherpad. The Docker documentation currently shows tag 2.6.1; verify the available tags immediately before deploying because releases change.
1. Test the image locally on the VPS
A minimal smoke test publishes a host port to Etherpad’s internal port 9001:
docker run --detach --publish 9001:9001 etherpad/etherpadThe same pattern can use a different host port, for example docker run --detach --publish 19001:9001 etherpad/etherpad. The official example also shows the generic form docker run --detach --publish <DESIRED_PORT>:9001 <YOUR_USERNAME>/etherpad. For a production topology, bind the service to loopback rather than all interfaces:
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
docker run --detach --name etherpad --publish 127.0.0.1:9001:9001 etherpad/etherpad:2.6.1Open the service through an SSH tunnel or from the VPS itself to confirm that the container starts. Do not treat a successful container start as proof that data is persistent or that WebSockets work; those are separate checks.
2. Supply configuration through environment variables
The image reads most settings from environment variables. The important names are:
PORT, which defaults to 9001.DB_TYPE,DB_HOST,DB_PORT,DB_NAME,DB_USERandDB_PASSfor the database connection.TRUST_PROXYfor operation behind a TLS-terminating proxy.
Environment substitution occurs when configuration is loaded; it does not rewrite settings.json on disk. Keep the environment file readable only by the account that needs it, and place database passwords and administrator credentials in a protected secret mechanism when your platform provides one.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →3. Mount persistent data
A container’s writable layer is not a backup. Mount a host directory or named volume for the database and any uploaded or plugin-managed files required by your installation. If you select a file-backed database, the file itself must be included in the backup. If you use a separate database service, back up that service and the Etherpad-managed files together so a restore produces a consistent instance.
The Docker documentation describes DirtyDB as the default fallback and lists SQLite as another file-backed option. Those defaults are convenient for evaluation, but a production decision should account for concurrency, restore procedures and the durability guarantees of the underlying storage. Whatever you select, document the exact location and test that a newly created pad survives container removal and recreation.
4. Convert the test into a repeatable compose deployment
Keep the image tag, environment values and volume mappings in a Compose file under version control, excluding the secret file. A typical service definition has the following shape:
services:
etherpad:
image: etherpad/etherpad:2.6.1
restart: unless-stopped
ports:
- '127.0.0.1:9001:9001'
env_file:
- etherpad.env
volumes:
- ./etherpad-data:/opt/etherpad-lite/varThe image’s internal paths can change between releases, so confirm the documented data path for the tag you deploy before relying on this example. The essential properties are the loopback bind, an explicit tag, a restart policy and a persistent mount that you have included in backups.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Option B: install Etherpad from source
The Etherpad FAQ documents a one-line Linux, macOS and WSL installer:
curl -fsSL https://raw.githubusercontent.com/ether/etherpad/master/bin/installer.sh | shThis is a convenience installer, not a substitute for review. Read the script, decide which revision and dependency versions you will permit, and make sure your production change process records what was installed. Piping a moving branch directly into a shell makes rollback and auditing harder than using a pinned checkout.
- Review the installer and its prerequisites before running it as an administrative user.
- Run it under the dedicated account that will own the Etherpad files and process where practical.
- Confirm the resulting service listens locally on port 9001 and that its data paths are on persistent storage.
- Configure the database connection and proxy trust settings before exposing the hostname.
- Create a service definition or process supervisor entry so Etherpad restarts after a reboot and writes logs to a location you monitor.
Source deployments make plugin and Node dependency control straightforward, but every update must preserve the checkout, dependency lock state, configuration and data backup. Record the exact revision used for each production release.
Put Caddy, NGINX or Traefik in front
Use one reverse proxy as the public entry point. All three can forward Etherpad traffic; choose based on what you already operate.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problems| Proxy | Certificate automation | WebSocket setup | Best fit |
|---|---|---|---|
| Caddy | Handles certificate issuance and renewal automatically for a valid public hostname. | The documented reverse-proxy directive handles WebSockets. | A small VPS where you want a short, readable configuration. |
| NGINX | Usually configured with your existing certificate workflow. | Requires explicit upgrade and connection forwarding. | Teams already standardizing on NGINX and its logging and access controls. |
| Traefik | Fits automated certificate workflows in container or orchestration environments. | Configured through its dynamic or container labels; verify the router forwards upgrades. | Docker or Kubernetes operators managing several services. |
Caddy configuration
The official Etherpad example is:
pad.example.com {
reverse_proxy 127.0.0.1:9001
}With DNS pointed correctly and ports 80 and 443 reachable, Caddy obtains and renews the certificate and proxies WebSocket connections. Check the Caddy log for certificate or upstream errors before investigating Etherpad itself.
NGINX configuration essentials
In the server block for your hostname, proxy requests to the loopback upstream and include the WebSocket headers:
location / {
proxy_pass http://127.0.0.1:9001;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}Reload NGINX only after its configuration test succeeds. The exact certificate directives depend on your existing certificate process; the important Etherpad-specific requirements are the loopback upstream and forwarded upgrade headers.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Traefik considerations
Define a router for the Etherpad hostname and a service targeting port 9001 on the container or host network. Ensure the entry point terminates TLS and that the router’s forwarded traffic retains WebSocket upgrade support. After every label or dynamic-configuration change, test a second browser session rather than relying only on an HTTP health check.
Enable HTTPS and proxy awareness
Terminating TLS at the reverse proxy is the recommended production arrangement: Etherpad listens on 127.0.0.1:9001, while the proxy serves the virtual host and certificate. Set trustProxy: true in Etherpad when the proxy terminates TLS. This lets Etherpad interpret X-Forwarded-* headers, record the client address correctly and mark cookies as secure.
Etherpad also supports native HTTPS. Add an ssl block to settings.json with paths for the private key, certificate and, when needed, an intermediate CA, then restart the service. Do not enable both native TLS and proxy TLS accidentally with mismatched assumptions about the upstream protocol. In the common proxy-termination design, the upstream remains plain HTTP on loopback.
Hosting Etherpad below a path
A dedicated hostname such as pad.example.com avoids path-prefix complications. If you must publish Etherpad below a path such as https://example.com/pad, configure the proxy to send X-Proxy-Path. Without that header, Etherpad may generate incorrect asset and API URLs, producing broken styles, scripts or requests even though the home page loads.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →After configuring a prefix, test a new pad, the editor assets, the API endpoints used by your clients and a second browser session. A path-prefix error often appears first as missing JavaScript or requests that unexpectedly return the site’s root page.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Database, files and persistence
Persistence has three parts: the database, Etherpad’s uploaded or plugin-managed files, and the configuration and secrets needed to reconnect them. Back up all three according to their actual storage location.
- For a file-backed database, stop or quiesce the service during a filesystem copy unless your database procedure guarantees a consistent snapshot.
- For an external database, use its native dump or snapshot mechanism and record the compatible Etherpad configuration.
- Include uploaded files and plugin-managed directories in the same backup schedule.
- Encrypt backups, restrict their access and retain at least one copy outside the VPS.
- Perform a restore on a separate instance. A backup that has never been restored is an assumption, not a recovery plan.
Keep the database port private. Etherpad should reach it over the local network or a private provider network with authentication and encryption appropriate to that environment.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
First-run verification checklist
- Visit the HTTPS hostname and create a uniquely named test pad.
- Open that pad in a second browser or private window and confirm edits appear in both sessions without noticeable polling delays.
- Use the browser network panel to confirm the WebSocket connection upgrades successfully.
- Reload the proxy and Etherpad, then verify the pad and its edits remain.
- Disconnect one browser briefly, reconnect it and confirm the session recovers.
- Inspect proxy and Etherpad logs for forwarded-protocol, database or permission errors.
- Confirm that port 9001 is not reachable from an external network scan.
Updates, rollback and routine operations
Pin a known image tag or source revision. Do not update directly to a floating latest tag on a production pad. The official Docker guidance describes pulling a newer image and updating a Compose deployment; apply that change first on a staging copy with a restored backup.
- Read the release notes and check plugin compatibility.
- Take a fresh database and file backup and record the currently running tag or revision.
- Pull the new image or checkout, then recreate or restart the service using the same persistent mounts.
- Verify HTTPS, WebSockets, pad creation, concurrent editing and reconnection.
- Keep the previous image or source revision available until the verification window closes.
- If a regression appears, stop the new service and roll back to the recorded version, restoring data only if the release changed its schema and the rollback procedure requires it.
Etherpad’s admin interface can notify you when a newer release is available. Treat that notification as a prompt to test, not as permission to update without a backup and rollback path.
Troubleshooting by symptom
The page loads but collaboration is slow or users do not see edits
Inspect the browser network panel and proxy logs for a failed WebSocket upgrade. Confirm HTTP/1.1 and the Upgrade and Connection headers are forwarded. Also verify that the proxy points to the correct loopback port and that no second proxy strips those headers.
Users are redirected to HTTP or cookies are not secure
Confirm TLS terminates where you expect, the proxy sends X-Forwarded-Proto, and Etherpad has trustProxy: true. Remove conflicting native-TLS settings if the upstream connection is intended to be plain HTTP on loopback.
CSS, JavaScript or API URLs are wrong under /pad
Use a dedicated hostname or add the required X-Proxy-Path header. Clear cached assets after correcting the proxy and test both the editor and API requests.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Pads disappear after a container replacement
The database or managed-file directory was not mounted to persistent storage, or the backup did not include it. Stop the test instance, identify the actual data path for the image tag, mount it explicitly and restore a known-good backup before accepting new production edits.
The container starts and immediately exits
Read the container log for an invalid environment value, database connection failure or permission error. Check that the selected DB_TYPE matches the supplied database settings and that mounted directories are writable by the process inside the image.
The public port is exposed despite the reverse proxy
Inspect the container’s port publishing and the host firewall. Bind Etherpad to 127.0.0.1:9001 and allow only 80/443 publicly; then retest from outside the VPS.
Security practices that matter on a small VPS
- Use HTTPS for every public request and keep certificate renewal observable.
- Protect administrator credentials and environment files with restrictive permissions.
- Keep Etherpad, the proxy, the operating system and plugins updated through a tested process.
- Limit firewall exposure to the ports and administrative sources you actually need.
- Monitor disk space, database growth, restart loops and certificate expiry.
- Separate backup credentials from the VPS account so a compromised host cannot silently erase every copy.
- Test pad creation and concurrent editing after proxy, image, database or firewall changes.
When Docker and source installations should not be mixed casually
Moving between installation methods is possible, but it is not a matter of copying a container ID. The data format, configuration paths, plugin set and ownership must match the target installation. Export or back up the database and managed files, record the running Etherpad version, deploy the target method on a separate port, restore into it and validate before switching the proxy upstream. Keeping the hostname and proxy unchanged while you test the replacement minimizes user-visible downtime.
Recommended Free Tools
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
