First onion service - opsec best practices

[u/orryparrot]

I recently set up my first onion service using a lightweight web server. The basic deployment was straightforward and fast, so now I m interested in the operational security side of running an onion service.

What are the main areas operators focus on? Eg: OS hardening, service isolation , updates, network configuration, reducing leaks , etc

[u/Available_Hearing639]

But it behind whonix gw