[Cthulhu_]

You don't have to open up a port, you can use a VPN or SSH tunnel (I don't know what the difference is) instead.

[jelly1]

With Cockpit Client this is not even required it will do the SSH magic for you.

https://flathub.org/apps/org.cockpit_project.CockpitClient