OS update, Remove unnecessary services, Harden SSH, Set up firewall, Install fail2ban,

that's all.