Changes
I migrated Redis to be outside the server.
I can now setup high availability by adding a second web-node. (This also paves the way for load balancing.)
DNS-ACME
WIth some custom code changes to the discourse (which I extensively tested) I can now pass DNS challenges for TLS. This means I can put the site behind a cloudflare proxy. (this also paves the way for load balancing)
Pinned docker image
The server version is a bit more reproducible. Not as much as if the server were nixos but closer.
This means any dangerous updates will need to be done manually and should be easily revertable.