debian security for personal box

[Piper H]

Hello members,

After installation debian. shall I change the default SSH port (22) to a
random port?
Shall I disable the root login? and what other policy should be applied
generally for security?

Thanks
Piper