Users

Add a non-root user with sudo access and keys

SSH

Set PermitRootLogin no

Grub

Disable crashkernel