I'm still screwing around with this which is why there are basically two websites I rebuilt the server and decided to revisit the code, then there was the WAF, the Cloudflare tunneling, the setting up of the Zero Trust network, the implementation of policies (what's public,

Well, that was a learning curve. Being tinkering for ages but finally ironed out all the bugs in other people code and blogs. Down to one webserver with multiple sites, running off docker, implemented via docker-compose, monitored by portainer, on a Proxmox VE server. The docker stack is growing weekly