A concise summary of how I set up, threat modelled, and pen-tested this site.