How "secure" is your setup?

What setups/softwares do you use to secure your server?

All I do is run the process as user with no login shell.

The topic came to mind after reading this post Is Authelia enough without fail2ban or crowdsec?

My stuff is only accessible from my LAN (because I haven’t figured out how to set up a tunnel or reverse proxy yet).

Tailscale is your friend.

I’ve tried to use ZeroTier because Tailscale still has centralized servers for starting the connection, but had trouble getting it to work. Maybe I should stop letting the perfect be the enemy of the good.