Secure Public Linux Cloud Server

1. update the system
2. Lock down SSH config file
3. copy ssh public key to server so you can access it without a password
4. allow ports 443 and 80 with UFW and enable UFW
5. set automatic updates
6. fail2ban