dedicated centos server and cPanel security with tweaking

i have centos 7 installed dedicated server .i want change shh port no .Disable root remote login,Add Public-key Authentication,Configuring a Basic Firewall,Disable login by Password(brute-force with disabling login by password.) and installation free security software with cPanel tweaking all installation will done by any desk to our computer.