> Depending on the installer operating system I can recommend the easiest way of locking down the machine. Quite primitive: all I did was put desktop-class Mint 19 on the PC (chosen solely because I happened to have it on a USB stick in my bag) and then install Apache. Our firewall is pfSense running on a dedicated server.