server hardening

A newly delivered dedicated server is not production-ready simply because it boots and accepts an SSH connection. Before it carries live traffic, the team