Months ago I wrote an article about securing a #selfhost #vps. That was securing against the threats from outside, because personal machines rarely has more than 1 user and almost never one you can not trust.
https://mizik.sk/blog/how-to-secure-your-personal-linux-vps/
Here is great article going into deep details, mostly from an internal point of view.
https://madaidans-insecurities.github.io/guides/linux-hardening.html
Definitely recommend to read if you plan to host multiuser machine or if you are into #linux #security. Make some tea/coffee, reserve an hour or two.