Translated by ChatGPT, with slight manual adjustments. LLMs make recording basic knowledge somewhat redundant, but for customized complex environment setups, it’s still better to keep notes—saves you from re-researching everything later. Server Choose a server: location, price, backups; vultr $6/m Configure quick local ssh connection: .ssh/config Host vultr HostName xx.xx.xx.xx User root Port xx Change ssh port: /etc/ssh/sshd_config Port Copy local public key to authorized_keys ufw enable $new_port; ufw disable $old_port Get a domain via cloudflare DNS A @ A www DNS settings: enable DNSSEC and multi-signatures Enable email routing & DMARC to avoid managing your own mail server Set SSL/TLS to Full Strict, generate an origin server certificate External visitors use cloudflare’s certificate, cloudflare uses the generated origin cert to talk to the server No need to manage external certs, and the internal cert lasts for 15 years hugo Change dns-nameservers in /etc/network/interfaces.d/50-cloud-init to 8.8.8.8 1.1.1.1 ...