Harden Your Gitea Before Someone Else Does

A practical checklist for self-hosted Gitea — written the week after an attacker walked into mine through a door I thought I'd already closed.