Debian baseline
A small Debian host can stay predictable when the initial package set is kept narrow and service ownership is documented.
Checklist
- Keep package sources minimal and documented.
- Use systemd units for long-running services.
- Keep public listening ports intentionally small.
- Prefer static files for public documentation endpoints.
apt update
apt install nginx certbot ufw dnsutils
systemctl enable --now nginx