A practical guide to locking down SSH access: Ed25519 keys, sshd_config hardening, fail2ban, port changing, and key management for single-admin servers.