I'm setting up a new VPS and want to make sure I secure it properly from day one before the automated bots start scanning it.
I've already taken care of the standard basics:
Disabled root login and password authentication (SSH keys only)
Changed the default SSH port
Set up a basic UFW firewall...