@_HellPie I haven't really done much other than disable password logins on the root user, set permissions for the mastodon data locations and slapped ufw on it. i should probably bother to make sshd actually reject root logins too
but i'm lazy so maybe tomorrow