Ask HN: Best (practical) books on web security?

I would like to learn more about topics like:

- DMZ

- bastion hosts (should we use them? Why or why not)

- ssh

- best practices

in the context of web development on the cloud. I've found a lot of material but they are very cloud-focused (aws/gcp security, for example) or rely a lot on Kubernetes (which I'm not using). I'm a solo-developer maintaining a simple Saas and I would like to keep it (more) secure than it is right now.