I'm in the following situation, i will have a fresh server connected to the internet (if required with a firewall between the net and it simply droping all packets on ports other than the one my application is listening on).
It doesn't require any services / features, there is no third party installation except for my program running on it (console application responding to http requests directly).
Is there anything specifically i should do to reduce the exposed area? This is for a standalone server, no internal network, no domain , no nothing, just needing to be able to launch a console app and remote desktop into it (just me, for administration purposes).
Aside from blocking all ports except those used by my app and RDP at the firewall level is there anything i should change / disable that i may not have thought of or is a fresh install already pretty minimally exposed?
This server's security is critical so feel free to add "paranoid level" suggestions as long as they don't disallow an application to listen & respond to http traffic on a given port