SECURITY.md Key-based SSH access only Firewall enabled with only necessary ports Automatic security updates enabled