So, this is pretty much by the book, but just in case it's helpful...
- I created a new VPS (1GB RAM, 1 CPU). (It is technically stronger than a potato)
- Once up, I did the usual:
- apt-get update; apt-get upgrade
- apt install needrestart
- apt install unattended-upgrades