Modify server configuration to lock down incoming SSH connections

root@instance:~# vi /etc/ssh/sshd_config

Disable the ability to login as a root user by changing the following value
PermitRootLogin no

Disable the ability to login as a root user by using password. And able to login using SSH keys
PermitRootLogin prohibit-password

Completely disable password authentication on the server by changing the following value
PasswordAuthentication no

Only allow specific users to be able to SSH into the server
AllowUsers foo bar@1.2.3.4 *@1.2.3.4
This allows specific users, user from a specific IP address or all users coming in from specific IP address

Now restart the SSH service
root@instance:~# service ssh restart

---

Last update: February 16, 2023