I would say frontend is harder than backend (if not more tedious). State management is a PITA, you have to learn X frameworks that do the same thing, and git gud with CSS.

Following this thread!

Stupid question, but are you somehow publicly exposing your vhost config (or a bak file of it)? Or do you see logs of someone bruteforcing the subdomain?