Look up hardening SSH and just use the same options for Tor as you would for the regular internet.

Two things to keep in mind:

1. Tor is TCP only so you can't use mosh which uses UDP.
2. Only allow connection through ssh keys without a password. I know you'll probably do that anyway, but it's good to point that out.