i'm optimism enough to believe this thread is not off-topic

hello, long time no see, folks.

now, i'm finalized migrating from freebsd to linux. what i will do later is:

*

    building an email server with opensmtpd, dovecot, and rspamd

*

    serving my blog which powered by hugo and nginx

sure, not only that, the rest is still in preparation.

the question is, if you were me, how would you maintain the security (a
paranoid answer is more preferred to scale up my skill)