# open the ssh configuration file
sudo vi /etc/ssh/sshd_configMake the following changes to /etc/ssh/sshd_config:
# disable password authentication
PasswordAuthentication no
# disable root login
PermitRootLogin no
# limit login to users to 'ssh' group
AllowGroups ssh
# disable hostname lookup
UseDNS noSave and exit, then reload ssh service:
sudo reload sshAdding new user:
adduser --shell /bin/bash --ingroup ssh usernameAdding existing user to ssh group:
usermod -a -G ssh usernameEnsure permissions are correct:
sudo chown -R username:username /home/username/.ssh
sudo chmod 0700 /home/username/.ssh
sudo chmod 0600 /home/username/.ssh/authorized_keys