debian stable headless (no GUI).
From defaults I install:
sudo
ssh
and then I write a script to auto check for updates every 24 hours for security reasons
Also, anything I install outside of the distro (like gazelle) I manually compile with the newest version. Debian stable has up to date...