Remote signing for Lightning node

What is the safest remote signing setup for a commercial Lightning node where the main node is colocated but the keys are in a geographically remote location that I physically control? What's the safest hardware wallet to use for automated signing for this setup?