Just set up a basic ssh connection, using key based authentication. You don’t need anything past that for a basic short term connection. I used one for years with port forwarding through my router to the ssh port on my desktop.

Now that I have a more complex setup with several services I use Tailscale and run my own Headscale server for it. But still, basic ssh will get you a long way and should be the first thing you do.

Or run your own headscale server, which is what I do.

Don’t bother with excellent passwords, just never allow password auth on anything remote.

If you're behind cgnat opening ports on your router won't do you any good. You have to call your isp and ask them for a dedicated public ip, usually for a price if they offer one at all. If that ip is static you can remember it, if not, you need ddns. If you're one of the lucky few not behind cgnat then yeah, your setup will be the simplest possible, but if you are, like the majority of people these days, it's one of the most complicated.

Is there a step by step tutorial for this you know of?

I used wg-easy myself as I wanted a basic admin interface to manage profiles: https://wg-easy.github.io/wg-easy/latest/getting-started/ (seems down at the moment)

Well yeah, duh.

I clearly misread that. Basically an SSH jump box, yeah?

Until Tailscale IPOs and starts locking the clients down, like BitWarden is doing right now.

thats what I meant. I was referring to setting PasswordAuthentication to no in the sshd_config.

Tailscale

I have a mango but its kind of showing its age, what's a decent modern one these days?

Just get one of their latest models. They're all solid. Whatever is in your budget.

Decided to go with the mango 2, didn't even know there was a second one now.

Can't argue against going with what you know :D