But that implies you do have your SSH open to the world, right?
The way I access my private web interfaces remotely is through something like Netmaker, Tailscale or Zerotier. Same thing for SSH. No way in hell am I opening 22 on my router.
You are not wrong, most of the time I SSH from the same IP so I only have 22 open from this adress. I think I just prefer managing this one access protected by a big key without thinking about my reverse proxy, plus I think TUI are neat. But objectively you are right, there may not be a lot of advantages.
Thanks to the developers though, I always appreciate such hard work and sharing to the community ♥️
This is not really correct. Those companies take complete control of the secret keys. And no, it is not the same effect when you use tailscale compared to wireguard cause of various reasons. CGNAT, no port forwarding, funnels etc.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.
Rules:
Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.
Resources:
selfh.st Newsletter and index of selfhosted software and apps
Could be really useful to have a UI over SSH without opening your web interface to the world. I will try because it seems great for my use case !
But that implies you do have your SSH open to the world, right?
The way I access my private web interfaces remotely is through something like Netmaker, Tailscale or Zerotier. Same thing for SSH. No way in hell am I opening 22 on my router.
You are not wrong, most of the time I SSH from the same IP so I only have 22 open from this adress. I think I just prefer managing this one access protected by a big key without thinking about my reverse proxy, plus I think TUI are neat. But objectively you are right, there may not be a lot of advantages.
Thanks to the developers though, I always appreciate such hard work and sharing to the community ♥️
No way in hell i am giving a company complete remote access to my servers and clients.
All these companies do is make it easier to use wireguard, if you’re so afraid of them just use wireguard yourself, you’ll get the same effect
This is not really correct. Those companies take complete control of the secret keys. And no, it is not the same effect when you use tailscale compared to wireguard cause of various reasons. CGNAT, no port forwarding, funnels etc.
You know those can be self hosted, right?
And yes, by all means just set up your own Wireguard or OpenVPN access if that’s what you prefer. You do you bud.
You can use any port for ssh. When I switched from 22 to 1337, brute force attempts at logging in stopped
Obscurity is not the same thing as security.
Well I use key-based login for security; obscurity just keeps the network congestion down