Like others said, disable password auth and setup auth keys instead.
Bonus points for moving the ssh port, using fail2ban and also setting up a tarpit with something like endlessh.
If you wanna go extreme use Wireguard to connect to your server and only allow ssh over wireguard in your firewall.
JShelter and uBO medium mode to the rescue. Pair that with Librewolf and you're pretty secure against fingerprinting.