fail2ban, ufw, SSH key auth, unattended-upgrades: the minimum viable security setup for any Linux server, done in order. This article goes into full detail on the topic from real-world experience.
Coming Soon
The full article is being migrated from the blog index to this dedicated page. Check back shortly, or get in touch if you want to discuss the topic directly.