Public SSH is convenient, but a login port exposed to the internet receives constant scanning even when passwords are disabled. A Tailscale SSH VPS setup gives the server a private address inside a tailnet, so an operator can test management access there and then remove public port ...