My tips don&#x27;t even warrant a blogpost.  CentOS + KVM then segment the bare metal into VMs to do the services.  One machine hosts an nginx I port forward to from the host.  Figuring out how to use iptables was the most time consuming bit.