Keeping a small VPS tidy
A few habits that keep a single-board workload predictable: pin package versions when it matters, separate config from data, and prefer reload over restart whenever a service supports it.
TLS 1.3 everywhere, on purpose
Modern browsers and servers already prefer TLS 1.3. Dropping older protocols reduces cipher negotiation noise and makes certificate rollouts easier to reason about.
Static sites still win
When the page is mostly text and a little CSS, shipping HTML from disk remains the simplest path: no runtime, easy caching, and almost nothing to patch.