network hardening

Practical guide to securely installing and hardening Ollama on Linux: keep the API bound to localhost and blocked by firewalls; if exposing, use a reverse proxy with TLS, auth, CORS limits and rate limiting; verify and pin model digests with locked-down permissions; avoid secrets in prompts and logs; update, monitor and back up routinely; and optionally isolate with a rootless container for extra defense.