Debian baseline

A small Debian host can stay predictable when the initial package set is kept narrow and service ownership is documented.

Checklist

• Keep package sources minimal and documented.
• Use systemd units for long-running services.
• Keep public listening ports intentionally small.
• Prefer static files for public documentation endpoints.

apt update
apt install nginx certbot ufw dnsutils
systemctl enable --now nginx