[sildur]

> That dedicated server you have to manage (ensure security, install the software you need, keep it updated and secure etc). It’s not for everyone.

apt install unattended-upgrades. And Hetzner's firewall.

[dx034]

And cloudflare tunnel which allows you to block even ports 80 and 443. The only attack vector is then through ssh but with passwords disabled I wouldn't worry too much about that.

[speedgoose]

By the way, unattended-upgrades is enabled by default nowadays.