Oh man it's going to be hilarious when your instance pisses off the troons and he has no idea how to mitigate the attacks. Considering all of the services/subdomains he hosts are from a residential IP (likely his home) and he's done nothing to utilize any DDoS mitigation services, nor does he at least use Wireguard to proxy traffic, he's going to be in for a real bad time.

I'd also recommend he figure out how to set up backups and finds a way to mitigate the database rot his instance will inevitably have over time.

I sincerely, genuinely wish you all the best of luck 🤣