The only thing I'd add is a CI/CD pipeline to make updating the VM easy. Maybe an Ansible playbook to better ensure the files get copied and that Caddy gets upd

The only thing I'd add is a CI/CD pipeline to make updating the VM easy. Maybe an Ansible playbook to better ensure the files get copied and that Caddy gets updated, if needed. All optional though.