Ask HN: Best way to secure on-premise servers?

My client asks me to put my servers in their private (non-internet connected) network.

This server contains proprietary code and deep-learning models.

What are the best practices to prevent any data theft?