Every time I put a service behind a reverse proxy I go through the same short list, because the failures are always boring ones.

A personal server does not need a change-management process, but it does need updates. My setup is deliberately dull.

A backup you have never restored is a hope, not a backup. The routine I settled on is small enough to keep doing.