[emergentcypher]

We manage ours in-house, it doesn't change very often, it's mostly a matter of staying on top of security patches. But we keep it on an entirely isolated vps where it won't be able to break anything else when it gets hacked.