A small webapp for a local non profit. Does its job, but doesn't really need anyone but some members of the non profit to log in. (The URL isn't currently publicized)
So I block all foreign country IPs, have a pretty good lockdown on open ports, and check for updates every now and then.