https://base64.co.za/securing-a-linux-server/