I have basic knowledge in Bash and with that knowledge I rented a remote machine in a mostly-self-managed hosting platform (DigitalOcean) and raised a LEMP environment on which I have a website.
I protect my environment with SSHguard. I applied automatic WordPress updates from the CMS CLI. I've established automatic backups of my data.
I tried to ask different people much more experienced in security then I am how to protect from DDoS (after other hardening I did), and everyone suggest me of using a CDN.
Is there really no other way?
I don't want to use a CDN because it an entire system I no desire to utilize if I don't have to.
Do I have any "non-overkill" option left?