- only IPVS for access, no docker's portforwarding - generate random password - generate config for collectd's curl_json