We may write up more when we have things stably working after a while. But we are very cautious mentioning any specific tools, as that gives attackers a head-start. We won't mention OS, stack, DB, etc.

But think something like secure boot, serve up a basic image, download full image from provisioning servers, turn on DB, restore from backups.