What if we could also guarantee that any ssh requests had to also go through Cloudflare? In other words, what if we didn’t accept ssh requests to the server IP but could force those through Cloudflare as well? This post describes options for just that through Cloudflare’s `cloudflared` service.
In this step we’ll create a new user, setup ssh, and configure it to not allow root user logins. There’s also a brief discussion of some of the sshd_config settings we used.