Problem
The security baselines composite in the repo currently doesn't do much; I put in the bare minimum, more as a placeholder than anything else, to get past that step and get to a functional containerized service as soon as possible.
Description
Do a full review of all security hardening that is relevant, and apply as many as possible (both for securing the stuff and for hands-on learning experience).
Definition of Done
[ ] An inventory of all possible security measures.
[ ] A triage of these measures, phased into releases, including which ones to never include.
[ ] The implementation of said measures into the security baselines composite before the next release.