debian security for personal box

[Piper H <potthua@gmail.com>]

Hello members,

After installation debian. shall I change the default SSH port (22) to a random port?

Shall I disable the root login? and what other policy should be applied generally for security?

Thanks

Piper