You might want to have a look at e.g. https://www.mimar.rs/blog/how-to-increase-openbsds-resilienc...