You understand perfectly. OP does not bother to explain what type of server or service they want to run, so this becomes a more difficult question to provide a

You understand perfectly. OP does not bother to explain what type of server or service they want to run, so this becomes a more difficult question to provide advice for. Even if it's just a web server they don't say who the audience is or what technologies they will use to run the website. e.g. - WordPress would be more difficult to secure than static content. There are many details left out which leaves room for only generic answers.