Back when I was managing system in a small company, I had a couple of systems on hidden service with auth cookies. When port forward failed or otherwise had problem accessing, it provided decent plan B for getting things back online.