[1] https://www.xmox.nl/
Not an endorsement as I haven’t actually tried it myself.
[0]: https://stalw.art/
For SSH access, I have fail2ban + access only via certificates. For the rest, I have disabled web access and APIs as I don't need them.
I also keep an eye on logs, but there is not too much there, besides some bots scanning for open relays
[1] https://www.xmox.nl/