[worksonmine]

> user/password accessible via ssh

This is the first thing you should disable as soon as your public key is on the server.