self host: the entire purpose is to get stuff off my machine for disaster recovery. different provider: limited options, they all play the same tricks, and pre-payment is essential to avoid bank payment failure risks (who also pull the same tricks)

OS update, Remove unnecessary services, Harden SSH, Set up firewall, Install fail2ban,

that's all.