You should take a look to production hardening from Hashicorp: https://learn.hashicorp.com/tutorials/vault/production-hardening