Add deploy user to vhost groups for chgrp permissions
Disable Dropbox backups by default
Give .htm/.html indexes priority over php
Block direct access to .php files in wp-includes and wp-content
Install APCu with PHP
Allow configuration of php.ini