I started using enhance a couple of months ago, but for some reason my VPS 's keep crashing about every other week.
Since I don't have much experience with unmanaged servers I asked Saint GPT for clues...

I will post the last lines of the log before the crash and what I got from GPT 4 .

I would appreciate any help / opinions (I haven't restarted the second vps to check that log, this one is from the one hosting the Control, both have plenty of RAM and cores)

From GPT

Based on the log entries, they seem to be primarily firewall (UFW BLOCK) entries, indicating that incoming connection attempts are being blocked by UFW (Uncomplicated Firewall). This is normal if the firewall is configured to block all inbound connections except those that are explicitly allowed.

However, there are a couple of entries related to Docker and systemd, That could indirectly hint at the reason behind the crash.

Dec 31 21:17:07 ssdnodes-6560eae589a37 systemd[1]: run-docker-runtime\x2drunc-moby-b43aca70be1b00a0f18fab05991ed22389015587fdf74e7213bf9c3119e2f47e-runc.ce060z.mount: Deactivated successfully.

Dec 31 21:22:09 ssdnodes-6560eae589a37 systemd[1]: run-docker-runtime\x2drunc-moby-b43aca70be1b00a0f18fab05991ed22389015587fdf74e7213bf9c3119e2f47e-runc.HpYCwz.mount: Deactivated successfully.

These entries suggest that your Docker containers might be deactivating or crashing due to some issues. It might be due to resource limitations (like RAM or disk space), or perhaps a problem with the Docker container itself (a process inside the container causing the crash).

I recommend checking the logs of your Docker containers using the preceding ID. You can use Docker command-lines like docker logs <container-id or name> to inspect the specific container logs.

On a side note, you seem to have a considerable number of UFW BLOCK entries. While this isn't directly related to the crash, it's worth noting. You're getting multiple connection attempts from different IP addresses across several ports, which could be a sign of a scanning activity or a brute force attack attempt on your VPS. You might want to consider tightening up security, such as changing exposed ports, using a VPN, or setting up a more advanced IDS/IPS system.

Remember, always ensure your systems are regularly updated to prevent software bugs that might lead to these crashes.

Dec 31 21:16:25 ssdnodes-6560eae589a37 kernel: [732923.543440] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=194.26.135.83 DST=172.93.52.103 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=63473 PROTO=TCP SPT=50376 DPT =4400 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 21:16:43 ssdnodes-6560eae589a37 kernel: [732941.599090] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=45.143.200.46 DST=172.93.52.103 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=30008 PROTO=TCP SPT=56174 DPT =29168 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 21:17:01 ssdnodes-6560eae589a37 CRON[2227304]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Dec 31 21:17:04 ssdnodes-6560eae589a37 kernel: [732961.893064] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=77.90.185.71 DST=172.93.52.103 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=34747 DPT= 8080 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 31 21:17:07 ssdnodes-6560eae589a37 systemd[1]: run-docker-runtime\x2drunc-moby-b43aca70be1b00a0f18fab05991ed22389015587fdf74e7213bf9c3119e2f47e-runc.ce060z.mount: Deactivated successfully. Dec 31 21:17:23 ssdnodes-6560eae589a37 kernel: [732981.590277] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=77.90.185.191 DST=172.93.52.103 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=48664 PROTO=TCP SPT=46848 DPT =61009 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 21:17:47 ssdnodes-6560eae589a37 kernel: [733005.328942] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=80.66.83.49 DST=172.93.52.103 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=36228 PROTO=TCP SPT=46536 DPT=3 4888 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 31 21:18:06 ssdnodes-6560eae589a37 kernel: [733024.064591] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=162.216.150.24 DST=172.93.52.103 LEN=44 TOS=0x00 PREC=0x60 TTL=249 ID=54321 PROTO=TCP SPT=50327 DP T=387 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 31 21:18:21 ssdnodes-6560eae589a37 kernel: [733039.415024] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=89.248.163.208 DST=172.93.52.103 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=33013 PROTO=TCP SPT=56282 DP T=8995 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 31 21:18:42 ssdnodes-6560eae589a37 kernel: [733059.925715] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=106.112.219.182 DST=172.93.52.103 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=42350 DF PROTO=TCP SPT=52375 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 Dec 31 21:19:09 ssdnodes-6560eae589a37 sh[3609245]: [2023-12-31T21:19:09Z DEBUG controld::system::stats] Refreshing disks list Dec 31 21:19:09 ssdnodes-6560eae589a37 sh[3609245]: [2023-12-31T21:19:09Z DEBUG controld::system::stats] Querying disk usage Dec 31 21:19:09 ssdnodes-6560eae589a37 sh[3609245]: [2023-12-31T21:19:09Z INFO controld] Returning service version 8.0.0 Dec 31 21:19:10 ssdnodes-6560eae589a37 kernel: [733088.392800] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=89.248.163.197 DST=172.93.52.103 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=44979 PROTO=TCP SPT=57886 DP T=59477 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 31 21:19:27 ssdnodes-6560eae589a37 kernel: [733105.615913] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=192.241.209.26 DST=172.93.52.103 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=34788 DP T=3479 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 31 21:19:54 ssdnodes-6560eae589a37 kernel: [733132.205277] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:86:dd SRC=2a06:4880:2000:0000:0000:0000:0000:0041 DST=2602:ff16:0001:0000:0001:03b7:0000:0001 LEN=64 TC=0 HO PLIMIT=242 FLOWLBL=167200 PROTO=TCP SPT=39509 DPT=41800 WINDOW=14600 RES=0x00 SYN URGP=0 Dec 31 21:19:55 ssdnodes-6560eae589a37 kernel: [733132.949384] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=80.66.83.171 DST=172.93.52.103 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=35752 PROTO=TCP SPT=56284 DPT= 3389 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 21:20:08 ssdnodes-6560eae589a37 systemd[1]: run-docker-runtime\x2drunc-moby-b43aca70be1b00a0f18fab05991ed22389015587fdf74e7213bf9c3119e2f47e-runc.EqkZuQ.mount: Deactivated successfully. Dec 31 21:20:20 ssdnodes-6560eae589a37 kernel: [733158.381825] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=77.90.185.154 DST=172.93.52.103 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=43184 PROTO=TCP SPT=48605 DPT =26389 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 21:20:22 ssdnodes-6560eae589a37 kernel: [733159.885101] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=89.248.165.48 DST=172.93.52.103 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=38933 PROTO=TCP SPT=56245 DPT =2462 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 31 21:21:23 ssdnodes-6560eae589a37 kernel: [733221.055267] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=14.221.238.79 DST=172.93.52.103 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=4317 PROTO=TCP SPT=25401 DPT=2 3 WINDOW=43426 RES=0x00 SYN URGP=0 Dec 31 21:21:29 ssdnodes-6560eae589a37 kernel: [733227.583902] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=60.188.49.27 DST=172.93.52.103 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=22621 DF PROTO=TCP SPT=39620 DP T=6379 WINDOW=27200 RES=0x00 SYN URGP=0 Dec 31 21:21:47 ssdnodes-6560eae589a37 kernel: [733244.830253] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=89.248.165.51 DST=172.93.52.103 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=7838 PROTO=TCP SPT=56277 DPT=3369 WINDOW=1025 RES=0x00 SYN URGP=0 Dec 31 21:21:48 ssdnodes-6560eae589a37 kernel: [733246.649236] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=92.63.197.224 DST=172.93.52.103 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=35205 PROTO=TCP SPT=58256 DPT=8075 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 21:22:09 ssdnodes-6560eae589a37 systemd[1]: run-docker-runtime\x2drunc-moby-b43aca70be1b00a0f18fab05991ed22389015587fdf74e7213bf9c3119e2f47e-runc.HpYCwz.mount: Deactivated successfully. Dec 31 21:22:09 ssdnodes-6560eae589a37 sh[3609245]: [2023-12-31T21:22:09Z DEBUG controld::system::stats] Refreshing disks list Dec 31 21:22:09 ssdnodes-6560eae589a37 sh[3609245]: [2023-12-31T21:22:09Z DEBUG controld::system::stats] Querying disk usage Dec 31 21:22:09 ssdnodes-6560eae589a37 sh[3609245]: [2023-12-31T21:22:09Z INFO controld] Returning service version 8.0.0 Dec 31 21:22:14 ssdnodes-6560eae589a37 kernel: [733272.232451] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=92.63.197.89 DST=172.93.52.103 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=13330 PROTO=TCP SPT=57112 DPT=48050 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 21:22:26 ssdnodes-6560eae589a37 kernel: [733284.455067] [UFW BLOCK] IN=enp3s0 OUT= MAC=52:54:c2:41:fd:92:5c:45:27:e7:2a:00:08:00 SRC=194.26.135.132 DST=172.93.52.103 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=60886 PROTO=TCP SPT=48113 DPT=3456 WINDOW=1024 RES=0x00 SYN URGP=0