This Seed/Skeleton contains all the best practices that you need to configure to improve security. I used ExpressV4