How about:

• By default enabling UFW and opening ports: 10000, 443, 80 and SSH. Default deny incoming?
• Setting swappiness to about 5
• Change nameservers to COMODO instead of google NS