SSH keys → certificates for access
https://www.paepper.com/blog/posts/how-to-properly-manage-ssh-keys-for-server-access/
Provisioning bare metal
https://docs.ansible.com/ansible/latest/cli/ansible-pull.html
GitOps on root servers
https://github.com/miekg/gitopper
Monitoring for solo founder
https://news.ycombinator.com/item?id=26203074
Inexpensive backups to rsync.net using borg
https://magnusson.io/post/backups/