Very good guide. It could be added that as a file system, btrfs should be used, which is an advanced file system capable of allowing system snapshots. Installing a firewall is vital.