Since the machine connects directly to an external network over PPPoE, I enable the firewall.
$ sudo ufw allow 80
$ sudo ufw allow 443
$ sudo ufw limit 22
$ sudo ufw enableI exposed the web server and SSH. SSH password login was disabled beforehand.
/etc/ssh/sshd_config
PasswordAuthentication no
Me
Check the settings with an online nmap site or similar.