Your best option is probably to read, understand, and use the configs at https://cipherli.st