Shit, you've just reminded me that I have to finish some ansible playbooks I started in september. The VPS they were supposed to configure only had some hardening an no traffic since then.