Ideally superseded by revinet/issues#7

Disable root login

sudo nano /etc/ssh/sshd_config and modify...

# PermitRootLogin yes
PermitRootLogin no

DataDog

Go to https://app.datadoghq.com/account/settings#agent and follow the instruction.

NTP

Uninstall standard NTP, install chrony and set...

server time1.google.com iburst
server time2.google.com iburst
server time3.google.com iburst
server time4.google.com iburst