The single best thing you can do security wise, is to NOT have any personal data on a web facing server.
Separate the data
Rereading it does look like you are doing the things right; so just audit what is on the public side. - your calendar and tasks- cool
Your photo and docs, do those need to be on there?
they are not accessible on the WAN
If they are on a server that is publicly accessible, please move them to a different location
Otherwise you sound like your doing well
Right?
I’ll be so happy to see them in production, in actual cars and trucks
But holy moly how much power is going across that charger to do that? The heat pump would (I imagine) be going full tilt to keep up
Oi