tighter slow query log threshold
ban more leeches
smaller pool
get varnishncsa to only print the code
more history, as www-data
pgpool2 -> pgbouncer, and add haproxy for request queueing
nginx isn't that CPU heavy
ban sorting