Firewall, generate/install SSL certs, flexible Nginx conf, SSHD conf.