diff --git a/docs/website-vision-plan.md b/docs/website-vision-plan.md
new file mode 100644
index 0000000..840b682
--- /dev/null
+++ b/docs/website-vision-plan.md
@@ -0,0 +1,1151 @@
+# FIREFROST GAMING: Website Vision & Implementation Plan
+
+**Project:** Dual-Path Website Architecture (Fire + Frost)  
+**Created:** February 8, 2026  
+**Architect:** Frostystyle (Michael) & The Wizard (Claude)  
+**Status:** 📋 PLANNING PHASE  
+**Confidence Score:** 85%  
+**Document Version:** 1.0
+
+---
+
+## Executive Summary
+
+Design and implement a dual-section website that embodies the Firefrost Gaming identity: a public "Frost Path" learning center for all ages, and a private "Fire Path" (Ignis) community space for adults only (18+).
+
+**Core Philosophy:** Safety, choice, and brand authenticity. Protect children AND adults simultaneously while letting the Emissary (Gingerfury/Meg) build community without compromise.
+
+---
+
+## The Vision: Fire + Frost Duality
+
+### The Frost Path (Public Face)
+
+**Purpose:** All-ages learning center and community showcase
+
+**Content:**
+- Minecraft build galleries
+- Linux tutorials
+- Technical guides from The Wizard
+- Community project showcases
+- Getting started resources
+- Server information
+
+**Audience:**
+- Kids exploring Minecraft
+- Parents researching communities
+- New players learning
+- The "Architects" (community builders)
+
+**Vibe:** Clean, professional, welcoming, educational
+
+**Access:** Open to everyone, no login required
+
+---
+
+### The Fire Path - Ignis (Private Lounge)
+
+**Purpose:** Adults-only community space (18+)
+
+**Content:**
+- Unfiltered gameplay discussion
+- Mature community conversation
+- Veteran player resources
+- Adult humor and social space
+- Advanced technical content
+
+**Audience:**
+- Adult community members (18+)
+- Veteran players
+- The core Firefrost community
+
+**Vibe:** Mature, unfiltered, authentic, trusted
+
+**Access:** Gated behind Ignis protocol (age verification required)
+
+---
+
+## Brand Integration
+
+### The Firefrost Identity
+
+**Fire (Gingerfury - Meg):**
+- 🔥 Red-headed Elven Rogue (D&D)
+- 🔥 Community passion and warmth
+- 🔥 The Emissary - public voice
+- 🔥 Social media presence
+
+**Frost (Frostystyle - Michael):**
+- ❄️ Human Frost Mage (WoW)
+- ❄️ Technical precision and control
+- ❄️ The Wizard - infrastructure backbone
+- ❄️ Security and stability
+
+**Together: Firefrost Gaming**
+- Union of passion and precision
+- Community warmth meets technical stability
+- Fire melts barriers, Frost builds foundations
+- A Minnesota-based gaming refuge built on partnership
+
+**The Website Reflects This:**
+- Frost Path = The welcoming warmth (Fire's domain)
+- Ignis Security = The protective barrier (Frost's domain)
+- Together = A safe space for everyone
+
+---
+
+## Technical Architecture
+
+### Current Infrastructure Baseline
+
+**Ghost CMS (Operational):**
+- IP: 64.50.188.14
+- Domain: firefrostgaming.com
+- Status: ✅ Active
+- Platform: Ghost v5.x (headless CMS)
+
+**Available Capabilities:**
+- ✅ Built-in membership system
+- ✅ Content gating by tier
+- ✅ Custom routes and URL structures
+- ✅ Webhook integrations
+- ✅ Theme customization
+- ✅ API for authentication
+
+**Supporting Infrastructure:**
+- ✅ Nginx reverse proxy (proven with Gitea deployment)
+- ✅ SSL/HTTPS (Let's Encrypt expertise)
+- ✅ Cloudflare DNS management
+- ✅ Frostwall security (UFW firewall)
+
+---
+
+## Implementation Phases
+
+### Phase 1: Foundation (Weeks 1-4)
+
+**Goal:** Build the dual-path structure with basic protection
+
+**Deliverables:**
+
+1. **Ghost Membership Tiers**
+   - Public Tier (Free): Frost Path access
+   - Ignis Tier (Paid - $1/month minimum): Fire Path access
+
+2. **Content Organization**
+   - Tag system: `#frost-path` and `#ignis`
+   - URL structure: 
+     - Public: `firefrostgaming.com/learn/*`
+     - Private: `firefrostgaming.com/ignis/*`
+
+3. **Basic Age Verification**
+   - Email verification required
+   - Birth date field (must be 18+)
+   - Payment verification (credit card = age proxy)
+   - Terms of Service acceptance
+
+4. **Nginx Routing Configuration**
+```nginx
+   # Public Frost Path
+   location / {
+       proxy_pass http://64.50.188.14:2368;
+   }
+   
+   # Private Fire Path - requires authentication
+   location /ignis {
+       auth_request /auth-check;
+       proxy_pass http://64.50.188.14:2368;
+   }
+```
+
+5. **Legal Documentation**
+   - Terms of Service (18+ requirement for Ignis)
+   - Privacy Policy (data handling)
+   - Community Guidelines (behavior expectations)
+   - Age Verification Policy (documented process)
+
+**Success Criteria:**
+- ✅ Two distinct content sections
+- ✅ Login required for Ignis access
+- ✅ Email + birth date + payment verification working
+- ✅ Clear visual distinction between sections
+- ✅ Legal documentation published
+
+**Estimated Effort:** 20-30 hours (technical setup + content migration)
+
+---
+
+### Phase 2: Enhanced Security (Weeks 5-8)
+
+**Goal:** Strengthen verification and add moderation tools
+
+**Deliverables:**
+
+1. **Manual Approval System**
+   - First-time Ignis members require admin approval
+   - Review queue for Meg/Michael
+   - Email notifications for new requests
+
+2. **Community Vouching**
+   - Existing Ignis members can vouch for new applicants
+   - Reduces manual approval burden
+   - Builds trust network
+
+3. **Monitoring Dashboard**
+   - Track sign-up patterns
+   - Flag suspicious accounts (multiple attempts, fake emails)
+   - Age distribution analytics
+
+4. **Enhanced Terms of Service**
+   - Immediate ban policy for discovered minors
+   - Photo ID verification option for suspicious accounts
+   - Appeal process documentation
+
+5. **Content Moderation Tools**
+   - Reporting system for inappropriate content
+   - Automated content flags (keyword filters)
+   - Moderation queue for Meg
+
+**Success Criteria:**
+- ✅ Manual approval working
+- ✅ Suspicious account detection active
+- ✅ Moderation tools deployed
+- ✅ First 10 Ignis members vetted and approved
+
+**Estimated Effort:** 15-20 hours (automation + tooling)
+
+---
+
+### Phase 3: Advanced Features (Weeks 9-12)
+
+**Goal:** Polish experience and add community features
+
+**Deliverables:**
+
+1. **Two-Factor Authentication (Optional)**
+   - Extra security for Ignis accounts
+   - Email or authenticator app based
+   - User choice to enable
+
+2. **Community Features**
+   - Member profiles (Ignis tier)
+   - Private messaging system
+   - Community events calendar
+   - Achievement badges
+
+3. **Analytics Integration**
+   - Google Analytics (Frost Path public metrics)
+   - Private analytics (Ignis engagement)
+   - Conversion tracking (Frost → Ignis)
+
+4. **SEO Optimization**
+   - Frost Path optimized for discovery
+   - Ignis hidden from search engines (noindex)
+   - Structured data for tutorials
+
+5. **Performance Optimization**
+   - CDN for public assets
+   - Image optimization
+   - Caching strategies
+
+**Success Criteria:**
+- ✅ Community actively using features
+- ✅ SEO bringing traffic to Frost Path
+- ✅ Ignis members engaged and retained
+- ✅ Site performance <2s load time
+
+**Estimated Effort:** 20-25 hours (features + optimization)
+
+---
+
+## Age Verification Strategy
+
+### Recommended Approach: Layered Verification
+
+**Layer 1: Self-Declaration (All Users)**
+- Birth date field (must be 18+)
+- "I am 18+" checkbox
+- Email verification
+
+**Layer 2: Payment Verification (Ignis Members)**
+- Stripe payment integration ($1/month minimum)
+- Credit card = age proxy (must be 18+ to have card)
+- PayPal also acceptable (same age requirement)
+
+**Layer 3: Manual Review (First Time)**
+- Admin approval for first Ignis access
+- Review profile information
+- Flag suspicious accounts
+
+**Layer 4: Community Vouching (Optional)**
+- Existing members vouch for new applicants
+- Reduces manual approval burden
+- Builds trust network
+
+**Layer 5: Enhanced Verification (Suspicious Accounts)**
+- Photo ID upload option
+- Third-party verification service (if needed)
+- Reserved for edge cases
+
+**Why This Works:**
+- ✅ Multiple barriers prevent casual minors
+- ✅ Payment = strong age indicator
+- ✅ Manual review = human judgment
+- ✅ Documented good-faith effort
+- ✅ Low friction for legitimate adults
+
+---
+
+## Legal Compliance Framework
+
+### Age Verification Documentation
+
+**Terms of Service Must Include:**
+- Explicit 18+ requirement for Ignis
+- Definition of "adult content" (mature conversation, not pornographic)
+- User acknowledgment of age
+- Immediate ban policy for violations
+- Right to request additional verification
+
+**Privacy Policy Must Include:**
+- What data is collected (email, birth date, payment info)
+- How data is stored (encrypted, secure)
+- Who has access (admins only)
+- Data retention policy
+- GDPR compliance (if applicable)
+
+**Community Guidelines Must Include:**
+- Behavior expectations (Frost vs Ignis)
+- Reporting mechanisms
+- Moderation process
+- Appeal procedures
+
+### COPPA Compliance (Children's Privacy)
+
+**Critical Rules:**
+- DO NOT collect personal information from Frost Path users
+- DO NOT require accounts for public content
+- DO NOT track minors
+- DO require parental consent if collecting data from under-13s
+
+**Solution:**
+- Frost Path = read-only, no login required
+- No cookies or tracking on public pages
+- Clear separation from Ignis
+
+### State-Specific Age Verification Laws
+
+**States with Strict Requirements:**
+- Utah: Age verification for "harmful content"
+- Louisiana: ID verification for adult sites
+- Arkansas, Mississippi, Virginia: Similar laws
+
+**Firefrost Strategy:**
+- Define Ignis as "mature conversation" not "adult content"
+- Document good-faith verification effort
+- Consult lawyer familiar with online communities
+- Consider geo-blocking if specific states become problematic
+
+**Risk Assessment:**
+- Low Risk: Mature gaming discussion (think Reddit's 18+ communities)
+- High Risk: Explicit/sexual content (we're NOT doing this)
+
+---
+
+## Content Strategy
+
+### Frost Path Content Pillars
+
+**1. Learning Center**
+- Minecraft tutorials (building, redstone, mods)
+- Linux server administration guides
+- Networking basics for gamers
+- The Wizard's technical deep-dives
+
+**2. Community Showcase**
+- Player build galleries
+- Server tours (video/screenshots)
+- Community event recaps
+- Achievement spotlights
+
+**3. Getting Started**
+- How to join Firefrost servers
+- Server rules and expectations
+- New player guide
+- FAQ section
+
+**4. About Us**
+- The Firefrost story (Fire + Frost origin)
+- The team (Wizard & Emissary)
+- Our values (security-first, community-focused)
+- Contact information
+
+**Publishing Schedule:**
+- 2-3 posts per week (Meg leads)
+- 1 technical deep-dive per month (Michael)
+- Event recaps as they happen
+
+---
+
+### Ignis Content Pillars
+
+**1. Unfiltered Discussion**
+- Mature gaming topics
+- Industry news and hot takes
+- Technical debates
+- "Real talk" about game development
+
+**2. Veteran Resources**
+- Advanced server optimization
+- Mod development discussions
+- Infrastructure deep-dives
+- The Wizard's lab notes
+
+**3. Community Social**
+- Off-topic lounge
+- Meme sharing
+- Game nights coordination
+- Inside jokes and banter
+
+**4. Exclusive Content**
+- Behind-the-scenes infrastructure
+- Early access to new features
+- Beta testing opportunities
+- Direct feedback channels
+
+**Publishing Schedule:**
+- Community-driven (members post)
+- Weekly discussion threads (Meg moderates)
+- Monthly "State of Firefrost" (Michael)
+
+---
+
+## Security Architecture
+
+### The Frostwall v2.0 (Website Edition)
+
+**Firewall Rules (UFW):**
+```bash
+# Ghost CMS (existing)
+ufw allow in on ens3 to 64.50.188.14 port 80 proto tcp
+ufw allow in on ens3 to 64.50.188.14 port 443 proto tcp
+
+# Rate limiting (prevent brute force)
+ufw limit in on ens3 to 64.50.188.14 port 443 proto tcp
+```
+
+**Nginx Security Headers:**
+```nginx
+# Prevent clickjacking
+add_header X-Frame-Options "SAMEORIGIN";
+
+# XSS protection
+add_header X-XSS-Protection "1; mode=block";
+
+# Content type sniffing
+add_header X-Content-Type-Options "nosniff";
+
+# Referrer policy
+add_header Referrer-Policy "strict-origin-when-cross-origin";
+
+# CSP for Ignis (stricter)
+location /ignis {
+    add_header Content-Security-Policy "default-src 'self'";
+}
+```
+
+**Ghost Security Settings:**
+```javascript
+// config.production.json
+{
+  "security": {
+    "maxLoginAttempts": 5,
+    "lockoutTime": 3600, // 1 hour
+    "sessionTimeout": 86400 // 24 hours
+  }
+}
+```
+
+**SSL/TLS Configuration:**
+- Let's Encrypt certificates
+- Auto-renewal enabled
+- TLS 1.2+ only
+- Strong cipher suites
+
+---
+
+## Moderation Strategy
+
+### The Emissary's Toolkit
+
+**Moderation Principles:**
+1. **Frost Path:** Family-friendly, no moderation needed (read-only)
+2. **Ignis:** Adult space, but still respectful
+3. **Zero tolerance:** Minors, harassment, illegal content
+4. **Three-strike system:** Warnings → suspension → ban
+
+**Meg's Moderation Powers:**
+- Content removal
+- User warnings
+- Temporary bans (24hr, 7 day)
+- Permanent bans (with Michael approval)
+
+**Automated Flags:**
+- Profanity filter (light touch in Ignis)
+- Spam detection
+- Suspicious link filtering
+- Multiple account detection
+
+**Escalation Path:**
+1. User reports content
+2. Meg reviews within 24 hours
+3. Action taken or dismissed
+4. User notified of outcome
+5. Appeals to Michael for final decision
+
+---
+
+## Technical Requirements
+
+### Server Resources (Ghost)
+
+**Current Allocation:**
+- Server: 64.50.188.14
+- RAM: TBD (check with provider)
+- Storage: TBD (check with provider)
+- Bandwidth: TBD (check with provider)
+
+**Recommended Minimums:**
+- RAM: 2GB (for Ghost + database)
+- Storage: 20GB (content + backups)
+- Bandwidth: 1TB/month (for image-heavy content)
+
+**Monitoring:**
+- Uptime Kuma (Phase 0.5 Service 2) will track Ghost health
+- Netdata (Phase 0.5 Service 4) will track resource usage
+
+### Database Backup Strategy
+
+**Ghost uses SQLite by default:**
+```bash
+# Daily backup
+0 2 * * * /usr/local/bin/backup-ghost.sh
+
+# Weekly offsite backup
+0 3 * * 0 rsync -avz /var/lib/ghost/content/ user@backup:/ghost-backups/
+```
+
+**What to backup:**
+- Database file (content + users)
+- Uploaded images
+- Theme files
+- Configuration
+
+**Retention:**
+- Daily backups: 7 days
+- Weekly backups: 4 weeks
+- Monthly backups: 6 months
+
+---
+
+## Budget Considerations
+
+### One-Time Costs
+
+| Item | Cost | Notes |
+|------|------|-------|
+| Ghost Theme (if custom) | $0-200 | Can use free themes |
+| Legal consultation | $200-500 | For Terms of Service review |
+| Logo/branding (if needed) | $0-300 | May have existing assets |
+| **Total One-Time** | **$200-1000** | |
+
+### Recurring Costs
+
+| Item | Monthly Cost | Notes |
+|------|--------------|-------|
+| Ghost hosting | $0 | Already paid (existing server) |
+| Domain | ~$1 | firefrostgaming.com (annual/12) |
+| SSL certificates | $0 | Let's Encrypt (free) |
+| Payment processing | ~3% | Stripe fees on Ignis memberships |
+| Backup storage | $0-5 | Can use existing infrastructure |
+| **Total Monthly** | **$1-10** | Scales with Ignis membership |
+
+### Revenue Potential
+
+**Ignis Membership ($5/month suggested):**
+- 10 members = $50/month
+- 25 members = $125/month
+- 50 members = $250/month
+
+**Cost offset:**
+- Even 2 members covers hosting costs
+- Revenue supports infrastructure expansion
+- Paid tier = commitment signal
+
+---
+
+## Success Metrics
+
+### Phase 1 KPIs (Foundation)
+
+**Technical:**
+- ✅ 99.9% uptime (Ghost + Nginx)
+- ✅ <2s page load time
+- ✅ Zero security breaches
+- ✅ SSL certificate valid
+
+**Content:**
+- 10+ Frost Path articles published
+- 5+ Ignis discussion threads active
+- Clear visual distinction between sections
+
+**Community:**
+- 5+ Ignis members approved and active
+- Zero minors discovered in Ignis
+- Positive feedback from adult community
+
+---
+
+### Phase 2 KPIs (Security)
+
+**Technical:**
+- Manual approval queue <24hr response time
+- Zero successful age verification bypasses
+- Automated flags catching 80%+ of issues
+
+**Content:**
+- Frost Path attracting new visitors (analytics)
+- Ignis engagement growing (posts/week)
+
+**Community:**
+- 10+ Ignis members
+- Community vouching system in use
+- Meg's moderation time <5hrs/week
+
+---
+
+### Phase 3 KPIs (Growth)
+
+**Technical:**
+- Advanced features adopted by 50%+ users
+- SEO bringing organic traffic to Frost Path
+
+**Content:**
+- Frost Path ranking for target keywords
+- Ignis content driving retention
+
+**Community:**
+- 25+ Ignis members
+- Self-sustaining community discussion
+- Meg's moderation time efficient (<3hrs/week)
+
+---
+
+## Risk Assessment & Mitigation
+
+### Risk 1: Minor Accesses Ignis
+
+**Likelihood:** Low (with multi-layer verification)  
+**Impact:** High (legal liability, community trust)
+
+**Mitigation:**
+- Multi-layer verification (payment = strong barrier)
+- Manual approval for first access
+- Immediate ban policy
+- Regular audits of member list
+- Terms of Service protection
+
+**Response Plan:**
+1. Immediate account suspension
+2. Review how bypass occurred
+3. Strengthen verification layer
+4. Document incident
+5. Consult lawyer if needed
+
+---
+
+### Risk 2: Content Moderation Overload
+
+**Likelihood:** Medium (as community grows)  
+**Impact:** Medium (Meg's time, content quality)
+
+**Mitigation:**
+- Automated flags reduce manual review
+- Community reporting tools
+- Clear guidelines reduce violations
+- Three-strike system deters bad actors
+
+**Response Plan:**
+1. Identify time-consuming tasks
+2. Automate where possible
+3. Add volunteer moderators (trusted Ignis members)
+4. Consider paid moderation if needed
+
+---
+
+### Risk 3: Legal Challenge
+
+**Likelihood:** Low (with good-faith effort)  
+**Impact:** High (legal costs, reputation)
+
+**Mitigation:**
+- Legal review of Terms of Service
+- Documented verification process
+- Clear age gate messaging
+- Immediate response to complaints
+- Professional legal counsel on retainer
+
+**Response Plan:**
+1. Consult lawyer immediately
+2. Preserve all documentation
+3. Review verification logs
+4. Cooperate with authorities
+5. Adjust policies as needed
+
+---
+
+### Risk 4: Payment System Issues
+
+**Likelihood:** Low (Stripe is reliable)  
+**Impact:** Medium (can't verify age via payment)
+
+**Mitigation:**
+- Backup payment provider (PayPal)
+- Alternative verification for payment issues
+- Clear communication during outages
+
+**Response Plan:**
+1. Switch to backup provider
+2. Manual approval for affected users
+3. Communicate delays transparently
+
+---
+
+## Timeline & Milestones
+
+### Month 1: Foundation Phase
+
+**Week 1:**
+- ✅ Ghost membership tiers configured
+- ✅ Content organization system designed
+- ✅ Legal documentation drafted
+
+**Week 2:**
+- ✅ Nginx routing configured
+- ✅ Basic age verification implemented
+- ✅ Terms of Service published
+
+**Week 3:**
+- ✅ Theme customization (Frost vs Ignis styling)
+- ✅ Initial Frost Path content migrated
+- ✅ Testing with trusted users
+
+**Week 4:**
+- ✅ Soft launch to existing community
+- ✅ First Ignis members approved
+- ✅ Monitoring and adjustments
+
+**Milestone:** Website live with dual-path structure
+
+---
+
+### Month 2: Security Enhancement
+
+**Week 5:**
+- Manual approval system deployed
+- Moderation dashboard built
+- Community guidelines published
+
+**Week 6:**
+- Monitoring tools integrated
+- First suspicious accounts flagged
+- Verification process refined
+
+**Week 7:**
+- Community vouching system tested
+- Enhanced Terms of Service updated
+- Moderation workflow optimized
+
+**Week 8:**
+- Security audit completed
+- Documentation updated
+- Phase 2 retrospective
+
+**Milestone:** Enhanced security operational
+
+---
+
+### Month 3: Community Growth
+
+**Week 9:**
+- Advanced features deployed
+- Analytics integrated
+- SEO optimization completed
+
+**Week 10:**
+- Community features promoted
+- Content calendar established
+- Growth marketing begins
+
+**Week 11:**
+- Performance optimization
+- User feedback incorporated
+- Feature refinement
+
+**Week 12:**
+- Phase 3 complete
+- Full retrospective
+- Plan for ongoing maintenance
+
+**Milestone:** Mature website with active community
+
+---
+
+## Maintenance Plan
+
+### Daily Tasks (Automated)
+
+- Health checks (Uptime Kuma monitoring)
+- Backup completion verification
+- SSL certificate status
+- Server resource usage
+
+### Weekly Tasks (Meg - 2-3 hours)
+
+- Review new Ignis member applications
+- Moderate flagged content
+- Respond to community reports
+- Post community updates
+
+### Monthly Tasks (Michael - 3-4 hours)
+
+- Review security logs
+- Update dependencies
+- Performance analysis
+- Backup restoration test
+- "State of Firefrost" post
+
+### Quarterly Tasks (Both - 4-6 hours)
+
+- Legal documentation review
+- Terms of Service updates
+- Security audit
+- Feature planning
+- Community feedback survey
+
+---
+
+## Decision Points
+
+### Before Phase 1 Launch
+
+**Decision 1: Ignis Membership Price**
+- Options: Free (with verification), $1/month, $5/month
+- Recommendation: $5/month (age proxy + sustainability)
+- Owner: Michael & Meg (joint decision)
+
+**Decision 2: Manual Approval vs Automated**
+- Options: All manual, hybrid, fully automated
+- Recommendation: Hybrid (manual first-time, automated renewals)
+- Owner: Meg (primary moderator)
+
+**Decision 3: Content Migration Strategy**
+- Options: All at once, phased, fresh start
+- Recommendation: Phased (Frost Path first, Ignis gradual)
+- Owner: Meg (content lead)
+
+---
+
+### Before Phase 2 Launch
+
+**Decision 4: Third-Party Verification Service**
+- Options: Stripe Identity, Yoti, manual ID upload, none
+- Recommendation: Manual ID upload for edge cases only
+- Owner: Michael (cost/benefit analysis)
+
+**Decision 5: Community Vouching Requirements**
+- Options: 1 vouch, 2 vouches, admin override
+- Recommendation: 2 vouches from established members
+- Owner: Meg (community trust model)
+
+---
+
+### Before Phase 3 Launch
+
+**Decision 6: Advanced Features Priority**
+- Options: 2FA, profiles, messaging, events
+- Recommendation: Based on Phase 2 user feedback
+- Owner: Michael & Meg (joint roadmap)
+
+**Decision 7: SEO Investment Level**
+- Options: Basic, moderate, aggressive
+- Recommendation: Moderate (organic growth focus)
+- Owner: Meg (content strategy)
+
+---
+
+## Appendix A: Technical Stack
+
+### Core Platform
+
+**Ghost CMS:**
+- Version: Latest stable (5.x+)
+- Database: SQLite (sufficient for <10k users)
+- Node.js: v16+ LTS
+- Theme: Custom Firefrost theme (Frost + Ignis variants)
+
+**Reverse Proxy:**
+- Nginx 1.24.0+
+- Modules: ngx_http_auth_request_module
+- SSL: Let's Encrypt via Certbot
+
+**Payment Processing:**
+- Primary: Stripe (lowest fees, best UX)
+- Backup: PayPal (wider acceptance)
+
+**Email Service:**
+- Mailgun or SendGrid (transactional emails)
+- Verification emails, password resets, notifications
+
+---
+
+### Supporting Infrastructure
+
+**Monitoring:**
+- Uptime Kuma (Phase 0.5 Service 2) - Ghost health checks
+- Netdata (Phase 0.5 Service 4) - Server resource monitoring
+
+**Backups:**
+- Automated daily backups via cron
+- Offsite storage (separate location)
+- Monthly restoration tests
+
+**Version Control:**
+- Gitea (Phase 0.5 Service 1) - Theme code, config files
+- Repository: firefrost-website-configs
+
+**Documentation:**
+- BookStack (Phase 0.5 Service 3) - Internal wiki
+- Workflow guides for Meg and Michael
+
+---
+
+## Appendix B: Legal Template Outline
+
+### Terms of Service (Ignis Section)
+
+**Section 1: Eligibility**
+- Must be 18 years or older
+- Verification required before access
+- Misrepresentation = immediate ban
+
+**Section 2: User Conduct**
+- Respectful communication expected
+- Harassment, illegal content prohibited
+- Three-strike system explained
+
+**Section 3: Privacy & Data**
+- What we collect (email, birth date, payment)
+- How we use it (verification, communication)
+- Who has access (admins only)
+
+**Section 4: Content Policy**
+- User-generated content guidelines
+- Firefrost reserves moderation rights
+- Appeal process
+
+**Section 5: Liability**
+- Firefrost not responsible for user content
+- Use at own risk
+- Indemnification clause
+
+---
+
+### Privacy Policy
+
+**Section 1: Information Collection**
+- Personal information: email, birth date, payment details
+- Usage data: page views, engagement metrics
+- Technical data: IP addresses, browser info
+
+**Section 2: Use of Information**
+- Age verification
+- Service improvement
+- Communication (newsletters, updates)
+
+**Section 3: Data Security**
+- Encryption in transit and at rest
+- Limited admin access
+- Regular security audits
+
+**Section 4: User Rights**
+- Data access requests
+- Deletion requests
+- Opt-out options
+
+**Section 5: COPPA Compliance**
+- No data collection from minors on Frost Path
+- Ignis age verification required
+
+---
+
+## Appendix C: Content Calendar Template
+
+### Frost Path (Public)
+
+**Monday:**
+- Tutorial Tuesday prep (Meg drafts)
+
+**Tuesday:**
+- Tutorial Tuesday published (Minecraft/Linux guides)
+
+**Wednesday:**
+- Community Showcase prep (collect screenshots)
+
+**Thursday:**
+- Community Showcase published (player builds)
+
+**Friday:**
+- Weekend Gaming Guide (what's happening this weekend)
+
+**Monthly:**
+- The Wizard's Deep Dive (technical article by Michael)
+
+---
+
+### Ignis (Private)
+
+**Weekly:**
+- Monday: Discussion thread (topic chosen by community)
+- Friday: Weekend planning (game nights, events)
+
+**Monthly:**
+- First Sunday: State of Firefrost (Michael)
+- Third Saturday: Community feedback session (Meg)
+
+**Ad-hoc:**
+- Behind-the-scenes updates
+- Beta testing announcements
+- Infrastructure changes
+
+---
+
+## Appendix D: Migration Checklist
+
+### Pre-Launch Tasks
+
+**Technical:**
+- [ ] Ghost membership tiers configured
+- [ ] Payment processing tested (Stripe)
+- [ ] Email verification working
+- [ ] Nginx routing configured
+- [ ] SSL certificates valid
+- [ ] Backup system tested
+- [ ] Monitoring configured (Uptime Kuma)
+
+**Content:**
+- [ ] Terms of Service published
+- [ ] Privacy Policy published
+- [ ] Community Guidelines published
+- [ ] 5+ Frost Path articles ready
+- [ ] 3+ Ignis discussion threads seeded
+
+**Legal:**
+- [ ] Terms reviewed by lawyer
+- [ ] Privacy policy compliant (COPPA, GDPR if needed)
+- [ ] Age verification policy documented
+- [ ] Ban policy established
+
+**Community:**
+- [ ] Announcement to existing community
+- [ ] Beta tester group invited
+- [ ] Meg trained on moderation tools
+- [ ] Michael trained on approval workflow
+
+---
+
+### Launch Day Tasks
+
+**Hour 0-1:**
+- [ ] DNS records updated (if needed)
+- [ ] Final health checks
+- [ ] Monitoring alerts configured
+
+**Hour 1-4:**
+- [ ] Announcement posted (social media)
+- [ ] First Ignis members invited
+- [ ] Monitor for errors/issues
+
+**Day 1:**
+- [ ] Respond to feedback
+- [ ] Approve first wave of Ignis members
+- [ ] Document any issues
+
+**Week 1:**
+- [ ] Daily check-ins with Meg
+- [ ] Address any bugs
+- [ ] Refine approval process
+- [ ] Gather user feedback
+
+---
+
+### Post-Launch Tasks
+
+**Month 1:**
+- [ ] Retrospective meeting (Michael + Meg)
+- [ ] Identify pain points
+- [ ] Plan Phase 2 adjustments
+- [ ] Celebrate wins!
+
+**Month 2:**
+- [ ] Review metrics (KPIs)
+- [ ] Survey Ignis members
+- [ ] Content strategy adjustment
+- [ ] Security audit
+
+**Month 3:**
+- [ ] Phase 3 planning begins
+- [ ] Advanced features prioritized
+- [ ] Growth strategy defined
+
+---
+
+## Revision History
+
+| Version | Date | Author | Changes |
+|---------|------|--------|---------|
+| **1.0** | 2026-02-08 | Frostystyle & The Wizard | Initial website vision and implementation plan. Three-phase roadmap with security-first approach and Firefrost brand integration. |
+
+---
+
+## Next Steps
+
+**Before Starting Phase 1:**
+1. Review this plan with Meg (get Emissary buy-in)
+2. Legal consultation for Terms of Service
+3. Budget approval for one-time costs
+4. Timeline confirmation (realistic with other priorities)
+
+**To Begin Phase 1:**
+1. Commit this plan to Git
+2. Create project board (Gitea issues or external tool)
+3. Allocate time blocks (avoid interfering with Phase 0.5 services)
+4. Schedule kickoff meeting (Michael + Meg)
+
+**Dependencies:**
+- Phase 0.5 Service 2 (Uptime Kuma) should be deployed first for monitoring
+- Ghost server health must be verified before major changes
+- Meg's availability for content and moderation planning
+
+**Estimated Start Date:** After Phase 0.5 completion (Services 2-5 deployed)
+
+---
+
+**END OF PLAN**
+
+**Status:** 📋 PLANNING PHASE  
+**Confidence:** 85% achievable with phased approach  
+**Owner:** The Wizard (Michael) + The Emissary (Meg)  
+**Vision:** Fire + Frost, together building a safe space for everyone
+
+🔥❄️ **Firefrost Gaming: Where Community Meets Security** 🔥❄️