Your post should be called "Securing the drupal appliance"! This info is very valuable, nice tips here, good practices about security. 

Maybe this could have it's space in the community documentation. If you have any extra tips be sure to post to the forums.