Docker firewall setup, SSL configuration, UFW rules, and SSH hardening — specific to your hosting provider. Because the fix for Hetzner looks different from the fix for DigitalOcean.