Facts, hacks and attacks from my life as a web application developer
Looks like a decent overview. One comment I have is that my postgres user doesn't seem to be allowed to ssh in by default. The log file says: User postgres not allowed because account is locked
whoever installed must have locked the account. you should unlock the postgres account with 'sudo usermod -U postgres'