Best Practices for Securing SSH
The article says to use two-factor-auth (obviously a good idea) but says nothing about HOW you add 2FA to SSH.  Does anybody have pointers?  I'd love to add 2FA to my bastion hosts, but don't want to put a ton of effort into doing so.