Connecting to my computer remotely and securely

Hi everyone,

​

I have wanted to be able to connect to my desktop remotely for a long time. I want to be able to be wherever (AKA I don't know what my IP will be on my client) and to be able to connect to my desktop (which I have available to web via DDNS). I'm not the best with networking, but I thought a way I could do this safely would be to set up XRDP connections through SSH. I think I have this working properly, but a requirement of this is still to allow SSH connection attempts from the open world.

​

I have configured my sshd to only accept key authentications (by setting sshd_config to have PubkeyAuthentication yes and PasswordAuthentication no), but obviously people could still try to initiate an SSH connection if they knew my URL.

​

I will also probably choose a random port to have my router port forward to 22, so that anything just probing 22 would miss, they would have to discover the port first.

​

Is there an easier way than this to feel safe about what I'm trying to do? Slash is it possible to really feel completely safe at all as long as my computer has any ports open to the wild wild web? I feel like I'm doing some common sense "security" by obfuscation, "don't be the lowest hanging fruit" kind of stuff, but still nervous someone might get in here and keylog me and get all my goodies.

​

Thanks for any thoughts or insight on this!