Be careful with ssh, your node may get hacked

The question is then, how we can secure the network and don’t allow this to happen in case we need to access via ssh from a different network?

For example, adding 2FA to ssh is one option (am surprised is not a default on umbrel yet!)

I assume Umbrel comes already with Tor and by default is not accessible outside the LAN networks via ssh. Have been trying to set up TailScale with MagicDNS, it does allocate a subdomain.tailscale.com to your node… that is not ideal either.

Any further options out there?