Don't you use docker? I think docker is pretty safe.
Of course independent hardware is always better but it also cost more.
I wanted to nix package your server since I am working on nixos but security is not my specialty have to dive into nixos containers.