Secure PHP installation on unix/linux systems

With the growing concerns regarding comment SPAM, XSS attacks, security breaches, etc, we should spend some time learning how to defend ourselves against such threats.
We already know everything about input validation, code and SQL injection attacks, error logging, vulnerability scanning, etc., don't we? ;-) So, let's focus on securing our PHP server, thus barring most of the attacks from the start.