Kevin Karhan
@kkarhan@infosec.space@arne I can recommend #Canonical's documentation re: #UbuntuLTS...
- I recommend "#ConfigirationByException" as good distros are hardened from the get-go.
Maybe just do #Pubkey-based #SSH auth and/or #Fail2Ban for anyone failing 3 logins or not being inside the "Managment LAN"...