I'm in the process of configuring a router/workstation running FreeBSD 11.0 that has a fixed IP. Ideally, I would like to run OpenVPN on it (still in the process of getting the config right) and be able to ssh into the machine. What are the best practices here? I reckon merely changing the port from 22 to some random four-digit number won't work. After I get the OpenVPN server up and running, I could just use that, but perhaps I would like to have a plan B, in case something goes awry when updating OpenVPN or so.