> Make sure you can ssh into the machine […] This is the tricky part. SSH gets blocked in some LANs, so then you would have no way to spontaneously deploy your

> Make sure you can ssh into the machine […] This is the tricky part. SSH gets blocked in some LANs, so then you would have no way to spontaneously deploy your VPN server. So better deploy it ahead of time.