Harden server

Subtask of #29 (closed)

I would suggest we do this via ansible (see #30 (closed)), and get some inspiration from https://github.com/githubixx/ansible-role-harden-linux (but not use the role directly).

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information