- upload ssh keys
- disable password login
- create sudo user
- copy ssh key to user
- `authorized_keys` must be readable by other (64)
- firewall settings on ufw
- https://www.digitalocean.com/community/tutorials/ufw-essentials-common-firewall-rules-and-commands
- install nginx
- https://www.nginx.com/resources/wiki/start/topics/tutorials/install/
- https://docs.nginx.com/nginx/admin-guide/web-server/reverse-proxy/
- https://serverfault.com/questions/562756/how-to-remove-the-path-with-an-nginx-proxy-pass
- install docker
- https://docs.docker.com/engine/install/debian/