Why? Putting SSH behind a WireGuard VPN provides stronger security guarantees than port knocking and is built into the OS on both my server and my clients.

I've long thought that this would be a great idea, but I've never spent the time to set it up. Any tool recommendations (for Ubuntu)?