What do you do to keep your server secure

For example, I prefer to use a VPN instead of port forwarding. And I use SSH for anything I used to use an FTP for.