Notes
- Renewed DNS entries after the registrar migration — a few subdomains still need cleanup.
- Bumped
fail2ban ban time on the smaller box, too many noisy scanners lately.
- Need to move the backup cron off peak hours, it collides with the nightly sync.