I'd add a quick section for a basic iptables setup as well, with holes for the appropriate services.