Secure WHM/cPanel + LiteSpeed Setup

I need a fresh server turned into a production-ready hosting environment built on the latest stable WHM/cPanel, LiteSpeed Web Server, and CloudLinux. After installation, everything must be fully hardened and connected to WHMCS so new client accounts can be created, billed, and managed without manual intervention.

Security is my main concern, so I expect:
• A properly tuned firewall (CSF/LFD or equivalent)
• Automatic SSL certificate provisioning and renewal for every domain via Let’s Encrypt
• Effective software-level DDoS mitigation, plus advice on upstream filtering options

Once those essentials are covered you’ll configure WHM itself—feature sets, backup schedules, email limits, default packages, and any other best-practice tweaks—so the panel is secure by default. Please include CageFS, ModSecurity rules, and any other CloudLinux tools you typically deploy for isolation and resource control.

Deliver the stack, hand me a concise document noting what you installed, key configuration paths, and safe-update procedures. I’ll consider the job done when I can:
1) Log in to WHM/WHMCS over HTTPS,
2) Create a test cPanel account that serves a LiteSpeed page with an A rating on SSL Labs, and
3) See no critical alerts in the firewall or DDoS logs after a basic stress test.

Root SSH and a clean VPS are ready; share past WHM/LiteSpeed/CloudLinux builds you’ve secured, and let’s get started.