You could separate the backend and frontend, run the backend on a minimal vm, then connect to it from the frontend.