System

Once the infrastructure exists, this is what actually turns a bare instance into a running platform: get in over SSH, prepare the disk OpenTofu only attached but didn't format, then install the tooling that runs everything else.

System architecture — which concrete tool fills each baseline service category, and where its actual setup is documented.

Setting up the OS — SSH in, then format and mount the data volume OpenTofu attached but left raw.

Starting maintenance services — installing the deployment platform itself now lives alongside its own evaluation rather than here.

Securing the system — the firewall layers, SSH hardening and rate limiting, and keeping packages patched. Identity, monitoring, and incident response moved to Security.