Use a SSH key to authenticate and disable the SSH password access.
Prometheus + Loki + Grafana with prometheus-node-exporter-lua on the router and syslog forwarding to the server VLAN.
uci set attendedsysupgrade.client.login_check_for_upgrades='0'Prevents OpenWrt from automatically checking for and applying upgrades.