Security concerns are always conspicuously lacking from this type of posts and discussions. If you’re a solo dev looking to start a project, please don’t take OP’s stack as a positive example. Use managed services whenever possible, they will at least keep you patched and simplify intrusion detection when configured correctly.