Need some guidance setting up a new LEMP droplet

Hello,

I’ve been interested in setting up a personal website using the LEMP One-Click install offered by DO but i have some questions about it:

How ready for production does it come out of the box?

My doubts here linger for example if Nginx/Php are already optimized for production or if Fail2Ban is already setup to monitor all pre-installed software.

What steps are recommended post having the Droplet up/initial setup?

So my ideia is to do the additional steps suggested in the LEMP One-Click page, create a non-root user, add nodejs as an additional resource and then get the droplet “production ready”, which as far as my knowledge goes it probably goes around securing nginx and php (if not already done).

I’m sort of looking for guidance in any additional “standard” steps towards protecting the droplet, hence why i’m choosing to start with a bundle instead of a “from scratch” droplet.