Disable unused services
System update
Only allow ssh over wireguard
You can also use your local clone with git send-email.
nooooommm