Comment by chromakode

I use Wireguard to secure and authenticate the transport. Much easier to set up! SSH is also an option.