Everything is in docker or a virtual machine that starts on boot. Docker containers are managed with Dockhand's web ui. Once a month I ssh and "sudo apt upgrade" but that's it.
I tried to use olivetin to avoid having to ssh but I ran into errors I haven't had time to investigate yet.