Additional info here - https://www.raspberrypi.org/documentation/remote-access/ssh/unix.md
## Lockdown - changing default ports
sudo nano /etc/ssh/sshd_config
## Disable root login
PermitRootLogin no
## Change default SSH port to any random port (eg. 2230)
Port 2230
## Lockdown - Firewall
sudo ufw limit ssh/tcp
sudo ufw allow 2230/tcp
sudo systemctl reload sshd