I am setting up a new Mac Mini server which will serve as a web server (with Apache and MySQL) as well as some other pieces of functionality. I have seen little on securing OS X for such a scenario (I am running Lion - and this is not Lion Sever).
I assume it is recommended to use ipfw as opposed to the application firewall. I also assume that it makes sense to lock down SSH (put it on a non-standard port and use certificate authentication). However, should I also lock down screen sharing (and force an SSH tunnel for this)? Any tips on this are welcome.