How I run my website, reverse proxy and mail server from a single Git repository, and how I let Claude Code work on it from inside a locked-down container.
How mailcow and a Hugo site share one server: Traefik for the web, direct ports for mail, one certificate source and an upgrade path that never forks upstream.