Apologies for the downtime of 32 seconds.
Now the website is hardened and writable only by the root user. WordPress' auto updates were disabled, and we will update it from command line using apt. We used the standard Debian GNU/Linux stable package called wordpress actually at 5.0.4:
During this upgrade we disabled the cache to let some time to troubleshoot the normal upgrade. If everything works and you want the webserver cache back again, just ask.