Check out https://infosec.mozilla.org/guidelines/openssh for a nice overview of best-practices on SSH.