Should include:

• Configuration following security review recommendations: https://phabricator.wikimedia.org/T114414#1918343
• Creating LVS virtual address (see realserver class)
• Cgroup definition/configuration
• Having one thumbor instance per core (either by listening on the same port or having nginx in front of the instances)
• tmpfs in memory if Thumbor still uses temp files following T132758