First I went into the Azure portal and looked at the reccomendations provided by Microsoft defender. These were:
1. Machines should be configured to periodically check for missing system updates
2. Linux virtual machines should enable Azure Disk Encryption or EncryptionAtHost.
3. All network ports should be restricted on network security groups associated to your virtual machine

However for all three of those, I tried to set them up through the Azure portal but was unable to, as I do not have permission apparently.
![no perms](./no_permission.png)

Steps taken to implement 0 trust
- Removed the ALL:ALL perms from the sudo group, and gave it to specifically my user
  - Ideally I would also limit my own permissions, but I don't know all the sudo commands I may need to use so I did not do that
- Installed fail2ban
- Enabled Uncomplicated Firewall and only allowed ports 22, 80, and 443 to be open
  - HTTP is allowed because Certbot already set up a redirect from HTTP to HTTPS