https://www.halfbrain.net/vps-attack-surface-reduction-checklist/