diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
deleted file mode 100644
index 0935ef8..0000000
--- a/.github/pull_request_template.md
+++ /dev/null
@@ -1,7 +0,0 @@
-<!-- markdownlint-disable MD041 -->
-
-## Summary
-<!-- What does this PR do and why? -->
-
-## Test plan
-<!-- How can the changes be verified? -->
diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
deleted file mode 100644
index 5a2465c..0000000
--- a/CODE_OF_CONDUCT.md
+++ /dev/null
@@ -1,44 +0,0 @@
-# Code of Conduct
-
-## Our Pledge
-
-We pledge to make participation in this project a
-harassment-free experience for everyone, regardless of age,
-body size, disability, ethnicity, gender identity and
-expression, level of experience, nationality, personal
-appearance, race, religion, or sexual identity and
-orientation.
-
-## Our Standards
-
-Examples of behavior that contribute to a positive
-environment:
-
-- Using welcoming and inclusive language
-- Being respectful of differing viewpoints and experiences
-- Gracefully accepting constructive criticism
-- Focusing on what is best for the community
-
-Examples of unacceptable behavior:
-
-- Trolling, insulting or derogatory comments, and personal
-  or political attacks
-- Public or private harassment
-- Publishing others' private information without explicit
-  permission
-- Other conduct which could reasonably be considered
-  inappropriate in a professional setting
-
-## Enforcement
-
-Instances of abusive, harassing, or otherwise unacceptable
-behavior may be reported through a
-[private security advisory](https://github.com/finallyjay/selfhosted-docker-services/security/advisories/new).
-All complaints will be reviewed and investigated and will
-result in a response that is deemed necessary and
-appropriate to the circumstances.
-
-## Attribution
-
-This Code of Conduct is inspired by the
-[Contributor Covenant](https://www.contributor-covenant.org).
diff --git a/SECURITY.md b/SECURITY.md
deleted file mode 100644
index fd6d464..0000000
--- a/SECURITY.md
+++ /dev/null
@@ -1,28 +0,0 @@
-# Security Policy
-
-## Reporting a Vulnerability
-
-If you discover a security vulnerability in this project,
-please report it responsibly.
-
-**Do not open a public issue.** Instead, report it through
-a [private security advisory](https://github.com/finallyjay/selfhosted-docker-services/security/advisories/new).
-
-Please include:
-
-- A description of the vulnerability
-- Steps to reproduce the issue
-- The affected service(s) and version(s)
-
-You can expect an initial response within 72 hours.
-
-## Scope
-
-This policy applies to the Docker Compose configurations
-and related files in this repository. Vulnerabilities in
-upstream container images should be reported to their
-respective maintainers.
-
-## Supported Versions
-
-Only the latest version on the `main` branch is supported.
diff --git a/SUPPORT.md b/SUPPORT.md
index f612b5e..3dbc9d7 100644
--- a/SUPPORT.md
+++ b/SUPPORT.md
@@ -13,7 +13,7 @@ following resources:
 - **New service requests:** [Open an issue][service] using
   the new service template.
 - **Security vulnerabilities:** Do not open a public issue.
-  See [SECURITY.md](SECURITY.md) for how to report
+  See the [security policy][security-policy] for how to report
   privately.
 
 [bug]: https://github.com/finallyjay/selfhosted-docker-services/issues/new?template=bug-report.yml
@@ -23,3 +23,5 @@ following resources:
 
 Issues with upstream container images (e.g., Plex, Pi-hole)
 should be reported to their respective projects, not here.
+
+[security-policy]: https://github.com/finallyjay/selfhosted-docker-services/security/policy