A different kind of advice: be vigilant with security updates, and remove services you're not using.
Using insecure software makes it likely you'll get hacked sooner or later, especially if automated scans can find your server. (For example because it's listed in a search engine, or part of some network like the fediverse).