- Install wsl (wsl2) preferred from windows insider build
- setup ssh
- change default port
- permit your user
- turn off password login (only allow keys)
- create task in windows task scheduler to start up sshd on boot
- setup firewall rules for the port you chose
- use powershell script from microsoft/WSL#4150 (comment)