guide: secure your server with improved wording

Author: 0xle0ne

docs/guides/infrastructure/secure-your-server.md

@@ -8,44 +8,44 @@ tags:
   - guide
 ---
 
-Below are the essential steps to secure your Next Hat server:
+This guide covers the essential steps to secure your Next Hat server.
 
-## Create your user
+## Create a dedicated user
 
-It is important to avoid using the root user for daily operations. Instead, create a new user with sudo and nanocl privileges.
+Avoid using the root account for daily operations. Instead, create a dedicated user with sudo and nanocl privileges.
 
-Create a new user and it's home directory:
+1. Create a new user with a home directory:
 
 ```bash
 adduser your_username
 ```
 
-Add the new user to the sudo group:
+2. Add the user to the sudo group:
 
 ```bash
 usermod -aG sudo your_username
 ```
 
-Add the new user to the nanocl group:
+3. Add the user to the nanocl group:
 
 ```bash
 usermod -aG nanocl your_username
 ```
 
-Replace `your_username` with your desired username.
+Replace `your_username` with your preferred username.
 
 ## Set up SSH key authentication
 
-To enhance security, disable password authentication and use SSH keys for logging in.
+For improved security, disable password authentication and use SSH keys instead.
 
-1. Generate an SSH key pair on your **local machine** (if you haven't already):
+1. Generate an SSH key pair on your **local machine** if you haven't already:
 
 ```bash
 ssh-keygen -t ed25519
 ```
 
 :::caution
-DO NOT SET AN EMPTY PASSPHRASE FOR YOUR SSH KEY. SOME MALICIOUS ACTORS MAY STEAL YOUR PRIVATE KEY AND ACCESS YOUR SERVER.
+Never use an empty passphrase for your SSH key. If your private key is compromised, attackers could gain access to your server.
 :::
 
 2. Copy the public key to your server:
@@ -60,14 +60,14 @@ ssh-copy-id -i ~/.ssh/<your_key>.pub your_username@your_server
 sudo vim /etc/ssh/sshd_config
 ```
 
-4. Find and modify the following lines:
+4. Locate and update the following lines:
 
 ```plaintext
 PasswordAuthentication no
 PermitRootLogin no
 ```
 
-5. Restart the SSH service:
+5. Restart the SSH service to apply the changes:
 
 ```bash
 sudo systemctl restart ssh