I installed Syncthing on a Ubuntu 24 VPS to sync files with others over internet. I'll use the encrypted at-rest functionality.

after reading up how to secure the VPS, I added ufw rules to drop all incoming traffic except SSH and syncthing, disabled root SSH access, created a dedicated user for syncthing, switched on unattended upgrades.

what other measures should I take to harden #linux and #syncthing ?