Enable management interface on LAN, in case I (still) have a virtualized firewall. ZFS: Enable encryption at rest. Limit memory usage. Enable notifications.