[jackhalford]

Or just use tailscale ssh, and turn off the old sshd.