Build it. Test it.
Write it down.

Test public HTTPS through a temporary tunnel, preserve the real client IP, reject forged forwarding headers, and close the test entry point.

Set up Nginx, PHP-FPM, and MariaDB without Docker, protect core files, and test login, uploads, matched backups, and restoration.

Use a dedicated account, test a real timer trigger, reproduce an exit-code failure, and verify recovery after reboot.

Observe real test queries and blocked transactions, verify slow-query logging, and compare execution plans before and after an index.

Reproduce peer authentication, incorrect password, and wrong-port errors, then verify recovery using a real application connection.

Test table and schema permissions, read-only access, write restrictions, and default privileges for future tables.

Configure verify-full, restrict source addresses, and test rejection of plaintext, wrong certificates, passwords, and unauthorized clients.

Move a sample database between two isolated Ubuntu servers and verify checksums, rows, ownership, indexes, and reboot persistence.

Build a daily logical backup with checksums and locking, verify a separate restore, and plan retention and independent copies.

Install PostgreSQL 16 without Docker, create an application role, verify SQL access, and restore a backup into a separate database.