Harden the VPS like any server. Don't allow traditional login, only SSH connections. Strong password for BTCPay sever admin.