An SSH tunnel is my strategy as well. The only internet port I have open is an OpenBSD sshd with a low privilege chroot'd user, SSH key auth only. I tunnel fro

An SSH tunnel is my strategy as well. The only internet port I have open is an OpenBSD sshd with a low privilege chroot'd user, SSH key auth only. I tunnel from my Android device using an SSH client app. The only port open to HA is localhost on the client.