Have you considered putting it behind cloudflare? It would offload your static assets from your vm with very little configuration.