Guides like this are tricky. They secure one facet of lots of things, and not always the things you actually want. If securing a server were as straightforward

Guides like this are tricky. They secure one facet of lots of things, and not always the things you actually want. If securing a server were as straightforward as changing ssh settings and firewall rules, distro providers would do this sort of thing out-of-the-box, or at the least there would be a script circulating on github for doing this specific setup.