Just use wireguard as VPN and bind ssh only to that interface. You loose public access but I couldn’t think of a reason why I want other devices than my own to connect anyway. You have to make sure that ssh starts after wireguard though or it can’t bind the port.

Clock, not watch. You’re right. Thanks. So it’s a clockmaker, not a watchmaker. My fault. It’s obvious that English isn’t my first language and I forgot that there is a difference. Sorry about that. I’ll try to clock out for these mistakes…ehm…watch out…i give up…

Since the watch to the right is not shot and shows the same time as every other watch it is unlikely thet the shot watches show the time of the murder. If all watches are stopped except the right one, it could have been exactly 12h before. But if it’s a watchmaker its also unlikely that every watch was set to the same time.