Every new VPS gets the same treatment before anything else goes on it. Writing it down so I stop doing it from memory.

A reverse proxy block, sane gzip defaults, and the security headers I always forget the exact syntax of.

Notion is great until you want your data somewhere Notion isn't. Markdown files and Syncthing turned out to be enough.

No more port forwarding on the home router. It took twenty minutes and I wish I'd done it years ago.