I’d just like to interject for a moment. What I’ve been referring to as “being fine”, is in fact, Dysthymia/being fine, or as I’ve recently taken to calling it, Dysthymia plus being fine
This profile is from a federated server and may be incomplete. View on remote instance
xkcd #2948: Electric vs Gas ( xkcd.com )
Alt text:...
The Reluctant Sysadmin's Guide to Securing a Linux Server ( pboyd.io )
It scratches the surface of the most obvious stuff. I’d only add running apps in isolation (docker or adduser) and maybe fail2ban.