https://www.digitalocean.com/community/tutorials has you covered on all aspects here. See also fail2ban. Setup ssh for keys only login, on a different port. They have tutorials on server hardening, hosting, you name it.