I enable unattended-upgrades to do my deb-based updates for me in the background. I also enabled esm with pro enable or something, so I get live kernel patches and more security updates than the default. I also install uptimed and run uprecords periodically because I'm a sucker for uptimes. As the server is in my office, it can be a bit noisy, especially when recording podcasts and stuff. So I ssh into it and sudo pm-suspend to make it sleep then just stab the power button later to wake it up again. I also use mine as a backup server for the various devices in the house and my remote servers. I use rsnapshot to do backups every 4 hours or so. I wrote a blog post about it a while back: https://popey.com/blog/2020/12/straightforward-linux-backups-with-rsnapshot/