Install updates regularly. Don’t install software from unofficial sources. If you see a recommendation like run curl something | sudo bash, ignore it. And, in general, don’t run anything as root unless you understand what you are doing and why this cannot be done without root privileges.

The best way is to disable password login and use SSH keys only. Any further steps are not required, but you may additionally install fail2ban or sshguard.