Assuming that I run a Tor relay on a virtual private server running linux, are there any good practices to keep my relay's private key safe?
We can take for granted that software packages constantly get updated and upgraded and that ssh access is restricted to ssh keys.
Should I use an encrypted loopback device to encrypt the private key? Are there any other attack vectors I should have in mind ?