important considerations for ssh:
- Change port to other than default (specially if exposed)
- Rate limit SSH traffic with a firewall (e.g., ufw)
- Disable password authentication (use RSA)
- Disable root login

sshd_config goes to /etc/sshd_config in ArchLinux
config goes to ~/.ssh/config