Riseup also has a comprehensive guide on setting up a secure hidden service: https://help.riseup.net/en/security/network-security/tor/oni...