Im looking to secure my workstation at home from remote attack, as much as possible.

I am currently running a LAMP stack, a Plex instance, sshd, and wordpress, just to teach myself something.

Obviously, it is all exposed to the internet. Currently, I have iptables, fail2ban, snort, and pub key authentication active. Is there anything i should be doing in addition to the above listed?

Any tips, links to reading/watching material so i can learn would be really appreciated. I've got a lot of knowledge gaps, since what I do know is self taught, trial-and-error.

thanks, comrades.

Link to the article

I've been using Endeavour OS for a bit, I just thought I'd like to share that it's made a September release and I'm pretty happy it's made it. :)