DigitalOcean + Umbrel

Currently running Umbrel on a Droplet with an additional 600GB space. How can I help secure and bulletproof this droplet (with a firewall)? Does anyone have experience/suggestions here?