I mean, PHP apache MySQL version, etc
I think we should first modify the security settings such as ssh port, panel port, etc.
If your app supports it, of course the higher the version of software, the better. like php73 mysql 8..
You can also refer to a post to deploy fail2ban for your server.