How to host Onion Services securely?

Torproject has a great guide Tor Project | Set up Your Onion Service. (Step 6) and Tor Project | Advanced settings

But does anyone have a guide/tips that are more advanced other than the ones mentioned in Torproject guide?

https://blog.nihilism.network/servers/endgame/index.html

EndGameV3 Anti DDOS / Load Balancer / WAF service popularized by Dread

For protecting onion hidden services against DDoS attacks.

Not exactly the same, but I once wrote about how to configure a hidden service in alt-svc mode, in order to improve performance for a clearnet website that’s being accessed over Tor.

Improves performance because when you set it up on your website, Tor browsers can access your website via regular relays instead of having to use an exit node.