Peer-to-peer mesh VPN service (free to start) that creates a secure network between your laptop and servers or between servers. Installing and authenticating with a host name lets you use that host name in Kamal configuration and start disabling public SSH. Strzibny recommends it but says exposed SSH is not the worst thing on small legacy servers.