Security Basics

1. Change SSH Port: Edit /etc/ssh/sshd_config to use a non-standard port.
2. Disable Root Login: Create a sudo user and disable direct root login.
3. Firewall: Enable ufw (Ubuntu) or firewalld (CentOS) and only allow necessary ports.