Secure and lock your own hosted ubuntu server (InvoiceNinja)


I have set up my own hosted invoiceNinja server On Ubuntu 18.04 I am completely new to this by coughing myself and wondering what security thought I need if it is something I forgot

I use xcp-ng is I have a VM for invoiceNinja it is on its own vlan but that should be locked between others Followed this late so i set up my invoiceNinja server using this manual and then i put on Let’s Encrypt and ufw in the manual for Let’s Encrypt it says that you should use ufw with words and not port numbers which is best. then I closed the 80 port in my USG

Make sure the server is automatically loading updates and that Let’s Encrypt is auto updating. Also you should probably take out any weak ciphers to help protect against a TLS downgrade attack.