Maybe the “let me fuck shit up and shoot up my high-school” crowd doesn’t really care about being remembered as heroes but what would I know.

Alright everyone, thank you so much for your thoughtful recommendations! To sum it up, here’s what I have done:

• I used let’s encrypt’s Certbot to get my SSL certs and setup https, auto-renew every 3 months and I setup a reminder to update Certbot every month.
• I setup a permanent redirect from http to https in Apache
• I installed a firewall on the Pi, only 80, 443 and [22 from my computer to the RPi] are open. I couldn’t find the firewall settings on my router but I assume they exist since I had to forward 80 and 443 there.
• installed the following plugins: WordFence and WP Fail2Ban
• changed the user password on the pi to a better longer one

I think I should be all set, shouldn’t I?

Wow lots of info. I’ll check all of this out. You have a good point that I don’t need wordpress. Hugo looks interesting, thanks for the advice!

And yes, as said above, I’ll look into the free SSL certs to setup https.

Thanks, I’ll look into it. I didn’t know there were free SSL certs out there

Probably a computer. I still don’t know if I want a laptop or a desktop. Still don’t know if I want to stay with Apple products or try something new. The frameworks laptops look cool but not the best bang for the buck. I also assume the tariff will kill the supply chain of spare parts which makes them attractive in the first place.