caddy, simple docker compose runtimes with watchtowerrr for updates. Hetzner is just a bunch of vms, they are all connected over wireguard for ease of use. UFW

caddy, simple docker compose runtimes with watchtowerrr for updates. Hetzner is just a bunch of vms, they are all connected over wireguard for ease of use. UFW at the edge for locking down ports. No DDoS protection, but I can turn it on in cloudflare which I use for DNS.