aleaph

Yep, I don't think too many people are exposing their python/node servers directly, it should be always behind a proxy or a fancy cloud LB.

Apache and nginx don't handle brotli out of the box.

RAM is expensive. You can go a long way by using NGINX fastcgi cache for non-authenticated traffic, avoiding even hitting PHP altogether.