2 weeks to set everything up (lamp stack, K3S, crowdsec, openappsec, wireguard, etc)

If you’re pushing kubes onto a normie or a noob, the fault’s partially yours. Single-box apache, maybe samba xor git, depending on the workflow, and some audio hints in /etc/profile.d to remind them how to restart various pieces if they can putty in.