Secure, optimal and best practices Jenkins

Jenkins setup:
Not revealed.

I’m new to Jenkins and I mounted a server with Docker and Docker compose, application firewall, a single SSH agent and a service to sync data. The goal is to run workflows on demand by users using API trigger. This infrastructure already has been achieved.

I was wondering if there is out there a best practices documentation for Jenkins in order to make it look custom to you, extend it with the right plugins, apply security measures… Everything I have works but I would like to refine everything for the next version.

Thank you so much and sorry if I’m not very specific. I’m actually looking for some good guide on this topic, not directly a tutorial that teaches you how to do specific things.

In order to get a custom look for your Jenkins you will need to install some of the theme plugins