In /etc/default/rcS set
FSCKFIX=yes
This has the effect of running fsck -y rather than fsck on startup. Note that it may be potentially unsafe.
In /etc/apt/apt.conf set:
APT::Install-Recommends "0";
APT::Install-Suggests "0";
Install apt-listbugs package.
In /etc/fstab, set noatime option for filesystems for which it makes sense.
Allow myself to do everything via sudo:
feuerbach ALL=(ALL) NOPASSWD: ALL
Defaults:feuerbach timestamp_timeout=-1
(Remember that later entries override previous ones, so place the most specific entries at the bottom.)
In /etc/ssh/sshd_config:
Disable root login
PermitRootLogin no
Optionally change ssh port
Port 123