David Bomba

edit the setting in the ssh config found at /etc/ssh/sshd_config
PermitRootLogin no

then restrict the users that can log in using ssh, use spaces between names
AllowUsers alice bob

restrart sshd service
service sshd restart

Basic Hardening Prinicples

Firewall

Mail server install