If it's a private project, like a Personal CRM, you don't have to maintain anything, just run it in a VM or container make access only possible over a SSH tunnel and forget about it.
I‘ve seen VMs running Ubuntu 10.something, with a Jira instance that was never updated. Then these people had both an outdated VM where upgrading to the next Ubuntu Sever LTD version was not a trivial task. And Jira was outdated as well. And I‘m not even talking about the Mysql and other services on that VM.
