And for hardening ssh:

https://github.com/bsdlabs/ssh-hardening

Then lock-down with PF (firewall).

Overall hardened FreeBSD:

https://hardenedbsd.org/

Or take parts of this Gist:

https://gist.github.com/jahil/4565d8dfa06254f0c11d