I'm new in this topic and I'm asking myself how I have to configure my production server in relation to SSH. What is the best way?
It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.
Is it a publicly accessible server? If so, you may want to run it on a non-standard port (popular security-by-obscurity tactic that keeps away ssh probers), disallow password authentication (might be a good idea anyway), disallow root authentication (see previous point), restrict access with iptables or set up fail2ban and iptables rules that limit connections/minute.
If not, you may want to relax some of these constraints.
A few tips that always apply: