Hacker News Reader

nginx or other reverse proxy running SSL - don't open ports directly to any of the apps.

You should also run fail2ban on everything.

jzymbaluk's fear is mine too. I should have made it explicit!

I'll follow these pointers for sure.