Certificate expiry is a date, not a dashboard color
Use SNI, inspect the public certificate, and alert before renewal becomes an incident.
Field notes
4 / 4
A certificate chain is a path you should be able to print
Read the chain the edge actually presents, not just the leaf, before you trust the rollout.
A static server should have one obvious root
One root, one file_server, and a small header policy make a static deployment easy to inspect.
Backups are only useful after a restore rehearsal
Choose a small recovery unit, verify it, and practice restoring it somewhere disposable.
Publish a static site by switching complete directories
Staging avoids file-by-file overwrites, but this two-step switch briefly removes the live path and still requires compatible assets for older pages.