Akatsuki Levi

Disable password authentication on SSH

Enable firewall and block all ports you’re not using(most firewalls do this by default)

Switch to a LTS kernel(not security related, but it keeps things going smooth… Technically it is safer since it gets updated less often so it is a bit more battle tested? Never investigated whenever a LTS kernel is safer than a standard one)

Use Caddy to proxy to services instead of directly exposing them out

HTTPS for web stuff(Caddy does it automatically)

You dont have to malloc and free manually That’s what it means by ‘not needing to do it manually’

Programming language like many others It has some fancy borrow checker that makes memory usage get statically analyzed by the compiler, so you dont have to manually manage memory, and the program won’t need a garbage collector

‘fuck’ and the family of ‘fucking’