How much security is enough?

[GragFields]

Hi

I'm new to ZoneMinder and setting up web servers in general. I was wondering what kind of precautions should I take to make sure my home server with ZoneMinder would be at least somewhat secure. Right now I'm using the built-in auth option in ZM. My server is behind NAT and I use port forwarding with non-standard ports to connect to the server. I have all other ports blocked with software firewall. Is there something else I should do? I'm using Ubuntu 16.04 if that makes any difference.

[mattionline]

Additionally i have a htpasswd with the user login and fail2ban to monitor and block the ip's which could bruteforce my password.
I don't know if zoneminder itself blocks bruteforcing.