You should add the one thing every tutorial neglects: How to lock it down and secure the database. As soon as you do this with a VPS, for app-oriented transactions, your DB collections are going bye-bye (aka "hijacked") within the next six months (if you're lucky.)
Linus
Software Developer at Home