Restrict SSH to incoming connections over a VPN
WireGuard introduced in c60728e7aa seems to be working fine! It would be nice to have a mesh network rather than hub-and-spoke but possibly that's a bit optimistic with all the NAT involved.
Wil…