- &quot;SSL&quot;: use lets-encrypt, save 11$&#x2F;yr. (there were other gratis CAs before that).<p>- &quot;must use Mac or Ubuntu&quot;: what?<p>- &quot;must use vim (with as many plugins as possibly)&quot;: what? Try a good IDE, like the ones from JetBrains, and you&#x27;ll be amazed how much it does for you. Aren&#x27;t you tired of doing refactorings like renaming variables with search&#x2F;replace? (It even has an <i>excellent</i> VIM emulation, and I&#x27;m a heavy vim (real vim) user.)<p>- EV SSL cert: dubious advantages<p>- fail2ban, non-standard SSH port: Just disable password logins instead. fail2ban isn&#x27;t all that useful <i>for SSH</i>. Non-standard SSH ports will keep your logs clean, but thats it.<p>- root login: just use &quot;PermitRootLogin without-password&quot; (prevents password login, allows ssh key login) and you&#x27;re good. A modern Debian does this by default. &quot;SSH access only&quot;? What the hell are you talking about?<p>I stopped reading shortly after (80% due to lack of time, 20% lack of interest).