I've also blogged a bit about the development process, hosting options and steps I took to harden the application against attack - https://blog.roberthargreaves.com/2026/01/03/building-hostin...
It's by no means a complete implementation of HTTP/2, but I think I've achieved the main aims I was hoping to achieve with it!
I would love some feedback though from more experienced folks if there's some egregious failings which I should address.