I'm quite interested in security, ideally with VPS systems.

Personally I follow (more or less) Andrew Eaton's[1] suggestions and I do my best to use tools I find interesting[2] and useful[3] that should be used in any server, virtual or "Bare Metal".

What are the best practices you can suggest so I can become better around this topic?

I'm eager to learn more.

[1] https://www.udemy.com/the-perfect-nginx-server-ubuntu-edition/ [2] https://github.com/jgmdev/ddos-deflate [3] https://github.com/jgmdev/stopspam