How to remove private keys from wallet.dat and create "receive only" wallet?
You're right, storing your private keys on a server is a bad idea - it means you're liable to lose all of your funds in the case of a hack. 

But as you aren't storing them, do you need to install the bitcoin daemon on your server? You could use an API from one of the online blockchains to monitor transactions from your server, and maintain your encrypted wallet.dat on your own computer.