Linux Server Hardening

*need to do through anydesk due to security reason*

cloudafare dns setting and blockign bad bots

Applications
Apache2.X
NodeJS 14.X
PM2 NodeJS
LibrariesModeRewrite (rewrite should be enabled), CURL, GD
ExtensionsIonCube loader (Version 12 or above)
PHP 7.4
SSH / SFTP
ssl encrypt with auto renewal to be installed on server, if we remove cloud fare lets encrypt has to be shown

input tabel policies
PHP hardening with SUPHP and SUHOSIN
root login email alerts
port changes

first we will do back then the below at last as the below is blocking somethings( need to do at last)
SMTP tweaking