How "secure" is your setup?

What setups/softwares do you use to secure your server?

All I do is run the process as user with no login shell.

The topic came to mind after reading this post Is Authelia enough without fail2ban or crowdsec?

It’s more difficult to steal my data when it’s only stored in a single place without backups.