- Use own dfparam.pem file, 4096bits instead of the letsencrypt 2048 default one - Add logrotate config, logs are rotated and deleted after 2 days - Better config? Idk xd