SYSTEM CHECKS PASSED:

[✓] SSH — key-based, root login disabled
[✓] Hugo — static site generator v0.164.0
[✓] nginx — web server with HTTPS (Let's Encrypt)
[✓] Git — auto-deploy pipeline active
[✓] UFW — firewall (22/80/443 only)
[✓] Fail2ban — intrusion prevention active

DEPLOYMENT: git push triggers Hugo rebuild + nginx reload automatically.

ACCESS: ssh james@23.95.16.12 (key-only, passwordless)