Yunohost security is good. You can stick with the default settings and have a very good password (very long, caps and lowercase, numbers…)
You can restrict access to your server based on geographical information (geoip), follow the link below, hook number 6: