My selfhosted stack includes:
1. immich
2. jellyfin
3. ghost
4. wallabag
5. freshrss
6. vaultwarden
7. nextcloud
8. overleaf/sharelatex
9. matrix server
10. pds for atproto
How do ship security patches?
How do backup? And do you regularly test your backup?
I feel like upgrade instructions for some software can be extremely light, or require you to upgrade through each version, or worse.
I assume everything running in docker.
For containers: Upgrading new versions can be done headless by watchtower or manually.
For the host: You can run package updates regularly or enable unattended upgrades.
Backups can be easily done with cron + rclone. It is not a magic.
I personally run everything inside docker. Less things to concern.
2. ?
3. ZFS duplicated pool with synced r-sync of snapshots on hetzner cloud
4. I don't really care about most of the upgrades because everything is behind a vpn.