Two chapters:

• systemd — a unit that validates before it starts, drains on stop, and survives the fd budget.
• A VPS deployment — a recorded setup: wildcard certificates and a multi-app host routing topology on one small box.