good starting point is How to maintain, check and improve the security of your Nextcloud installation and other 101 articles