How can I setup my SSH server so that the authentication method depends upon the client IP address?
internal network -> password login enabled
request from WAN -> only passkeys enabled
I would avoid to setup two accounts (internal/external) for each user and rewrite the configuration file accordingly.