What are common practice's for hardening/securing your server?

Use a hardened-by-default OS like OpenBSD, HardenedBSD, or something similar in Linux.