Either Gridpane or Runcloud using a Vultr HF and MariaDB for the database
Nginx FastCGI Cache + Redis
Cloudflare free + Super Page Cache for Cloudflare,
This will cache pages and assets, I’ll use cloudflare rules to do a browser check on every login page to eliminate all bot attempts and eliminate a few countries from even reaching the server.
Use few but performant plugins, always keep things up to date.