- /etc/lvm/lvm.conf -> issue_discards = 1
- deploy hashicorp/vault to store encrypted files:
    - user SSH keys
    - user passwords
    - secure files
- setup fstab with sshfs, noatime
- add smartmontools & conf