Limit SSH, boost Apache workers, KA Lite static caching, SSHD lockdown.