> For safety, key authentication and fail2ban would cover a lot. I mainly have the 1 port. Changing the port from the default 22 to something else is also reco

> For safety, key authentication and fail2ban would cover a lot. I mainly have the 1 port. Changing the port from the default 22 to something else is also recommended, if only because it makes fail2ban logs way less verbose.