[09:58] win! server upgraded from trusty to xenial and then to bionic [10:03] I think I have everything [10:03] properly locked down now [10:03] x-fingers etc [23:45] heh, that didn't completely work as expected, had to restore my /etc/letsencrypt to get the previous certificates back