Disable root login, change SSH port
Update firewall for new SSH port