5-Step VPS Hardening Checklist
adduser myuser && usermod -aG sudo myuser
# /etc/ssh/sshd_config: PermitRootLogin no, PasswordAuthentication no
ufw allow 22 && ufw enable
apt install fail2ban -y && systemctl enable --now fail2ban
apt install unattended-upgrades -y
⚠️ Don't close your current SSH session until you've verified the new connection works.