# Notes

## Operational guidance
- Keep a root session open while applying SSH/UFW changes.
- Verify `ssh sovereign@<ip>` in a second terminal before closing root.
- Prefer exposing services via Cloudflare Tunnel; keep inbound ports minimal.

## Extending
v1 is apt-based and designed for Ubuntu/Debian. For other distros, fork the install steps.