Three months of building a private, tailnet-locked fortress — from bare VPS to a 35-container stack with zero public ports.