Ubuntu + Caddy + PHP-FPM configured with layered hardening. UFW, Fail2ban, strict PHP settings, and local-only monitoring keep the surface small while automated updates handle routine patching.
SecScan is a lightweight, automated monitoring tool built to maintain server health and security with minimal overhead. It runs as a systemd service and timer, executing every two hours to perform a comprehensive set of checks and integrations.