2 weeks to set everything up (lamp stack, K3S, crowdsec, openappsec, wireguard, etc)

If you're pushing kubes onto a normie or a noob, the fault's partially yours. Single-box apache, maybe samba xor git, depending on the workflow, and some audio hints in /etc/profile.d to remind them how to restart various pieces if they can putty in.

echo 'yum clean ; yum upgrade --skip-broken --no-best ; needs-rebooting && reboot||:' > /etc/cron.weekly/do-eet

... and walk away.

(--no-best and --skip-broken because RH can't even do releng now. 'You had one job' meets 'Dead Sea Effect')