Securing the server like any other, 2FA for nextcloud, and follow the security guidelines: https://docs.nextcloud.com/server/latest/admin_manual/instal...