A checklist for reliable self-hosted services


Running a service after the installation succeeds is mostly about avoiding silent failures. A short checklist helps more than another dashboard that nobody watches.

Verify the path users actually use

A healthy process on a server does not prove that DNS, TLS, firewall rules, and the application all work together. Test the complete path from an external network and include authentication when possible.

Make renewal and recovery boring

Automatic certificate renewal needs a periodic test, not only a timer. Backups should include the data required to rebuild the service and should be checked for readability. A configuration file without its database is often not enough.

Change one layer at a time

Network, application, and client changes are harder to diagnose when deployed together. Keep a known-good configuration, make one change, and verify it before moving to the next.

These checks take little time and make later maintenance substantially easier.