Also look into running nixbitcoin (https://nixbitcoin.org/) which leverags the Nix package manager and NixOS (https://nixos.org/). NixOS allows for modular abstractions to keep running a node highly customizable and maintainable while limiting permissions. The Nix package manager is a community of passionate individuals that are constantly performing security hardening evaluations. nixbitcoin is a number of Bitcoin and Lightning modules built on top of NixOS with the same goal of security hardening. Makes for a secure, harden, modular node setup without too much hassle.