Security check lists

Security.txt

# Image server daily
# Backup databases daily
# Disable drop permissions on mysql
# Update containers
# Ban know bad IPs
# Monitor CPU usage of host
# Update Wordpress: plugins, themes
# Enable WordPress plugin for: 
  - Minimal Coming Soon & Maintenance Mode
  - Simple Google reCAPTCHA
  - Google Authenticator – WordPress Two Factor Authentication (2FA , MFA)
  
# Disable all uneeded ports
# Enable proxy
  - Add proxy config for:
    - Content-Security-Policy
    - X-Content-Type-Options
    - X-Frame-Options
    - X-XSS-Protection
    - Feature-Policy
    - server_tokens
    - fastcgi_hide_header
    - Strict-Transport-Security
    - ssl_ciphers - Limited
    - ssl_protocols - Limited
# Add fail2ban rules
  - Honey pots
    - Instant bans
  - DOS GET/POST
  - ...