1. Watchtower

2. ?

3. ZFS duplicated pool with synced r-sync of snapshots on hetzner cloud

4. I don't really care about most of the upgrades because everything is behind a vpn.