For additional security your authorized_keys file will also be put in place to only take connections from sure IP addresses or hostnames. Placing that up is past the scope of the guidebook, but more information to the SSH authorized_keys file can be found at SSH Academy: Configuring authorized_keys for https://createssh.org/