Various steps to make the system more secure.
Boot parameters
hidepid
Kernel attack surface reduction
sysctl
https://madaidans-insecurities.github.io/guides/linux-hardening.html