[kasumis_]

no CDNs as it leads to tracking by CDNs.

[erelde]

Close your port 22 at least. Define some simple iptables rules.

Only able to login if coming from specific ip address, like a private vpn server.