I would suggest you change the session key.
I would also recommend using nginx as a reverse proxy and then lock everything down on the firewall other than SSH, 80, 443. Change the port of SSH, install and configure Fail2ban for the new port.
There are other changes you need to make to the condenser config files for full functionality.
What is a "soft reboot". If you are just logging back in, you are only reloading your profile.
I'd make sure things are locked down before having people put their private keys on it. There are more steps to it there you have here to properly set it up and secure things unless you just running it privately behind your firewall for personal use.
Done it the first time. I have different ways protecting my servers.
All noted and appreciate all the tips.
Still working on some config file. Will update soon.
Thanks again, we need this constructive feedback to make this community better ever