@dalias @audiodude That would mean my server having out outbound network access and either implementing full AP or some kind of bridging.
Much more overhead and comes with increased exposure. Not necessarily a huge risk but far more attack service than a port 443 listener serving fully static content that I periodically scp a folder of html files to from a makefile on my workstation.
@dalias @audiodude The current backend of my blog is Jekyll compiling a git repo of markdown on my workstation to html+css.
The makefile just runs jekyll and scp's the files over to the web vm.
Web box itself has no outbound except certbot and no server side scripting capabilities, databases, etc.
When one of my posts hit the orange site I was getting a hit every second and had a 0.00 load average on a single vCPU, using something like 130 MB of RAM.