How to secure Debian https ssh

Goal

Reasonable security for public Debian 7 server with:

• https
• ssh

Research

• Securing Debian Manual
• Package: harden (0.1.38+nmu1)
• Stack Exchange - hardening-debian
• Noobsysadmin - Hardening your Linux Debian 7 Wheezy – Part 1
• biapy - harden ssh on Debian
• linoxide - Lynis - Security Tool for Audit and Hardening Linux / Unix Systems
• digitalocean - How To Install and Use Bastille To Harden an Ubuntu 12.04
• unixmen - How to Harden Your Linux Servers Security with Bastille
• linode - Securing Your Server
• Hardening ssh Servers