[ivoecpereira]

I would suggest reading about Ansible and working on an initial collection of Ansible playbooks that might help on that. Check out https://www.thecloud.coach/ansible-crash-course. Of course nothing beats a dedicated devops but some playbooks regarding main security compliances might do a great job. Anyone correct me if I am wrong but I am seeing it as a good base practice for these cases.

[scarejunba]

Honestly, I think this is going in the wrong direction for OP's use-case. He definitely should go in the serverless direction.

If he learns any sort of dev-ops infra management he's just wasting his time.

[ivoecpereira]

Possibly. I use Serverless as well but I prefer to keep my options open when playing with a new project, than trying to force everything into the same tool. If he is lean to learn something, Ansible might be good for setting some servers up, but there are some nice other suggestions in the thread if he doesn't want to.