h3ndrik, 1 month ago (edited 1 month ago)

• fail2ban / brute forcing prevention
• quick, frequent updates(!)
• containerization / virtualization
• secure passwords, better keys
• firewall
• a hardened operating system (distribution)
• SELinux / Apparmor / … / OpenBSD
• not installing unnecessary stuff
• An admin who is an expert and knows what they do.