Three PHP sites on an unpatchable Debian Buster box, and how they ended up in FreeBSD jails two days later.