Absolutely essential is using a firewall and set it as strict as possible. Use MAC like SELinux or Apparmor. This is extremely overkill for a personal server, but you may also compile everything yourself and enable as many hardening flags as possible and compile your own kernel with as many mitigations and hardening flags enabled (also stripped out of features you don't need)
ramenu
joined 9 months ago
Sidenote: If you just want a nice web frontend for others to view your Git repositories, you can use cgit instead.
Lmao