How about security? Any good resources / practices on making your server safe? and maybe not those kernel level tricks also automated deployment so I can com

How about security? Any good resources / practices on making your server safe? and maybe not those kernel level tricks also automated deployment so I can commit and it'll be deployed on the server I thought about using GitHub Actions so when I push, then the server receives HTTP Ping and clones repo and setups the app