- Use jinja template for configuration file (start.py) - Limit access to the Mailu subnet - Implement health checks