Format with prettier

This commit is contained in:
RealStickman 2023-01-05 12:44:27 +01:00
parent a8a3f5de59
commit 5a3d639843

View File

@ -4,25 +4,33 @@ visible: true
---
[toc]
## Linux Server
### Installation
#### Debian
`# apt install openssh-server`
#### Arch
`# pacman -S openssh`
`# systemctl enable ssh`
### Configuration file
`/etc/ssh/sshd_config`
Make sure to restart the sshd service after changes.
### Change port
Uncomment `Port` and set any port number
### Root login
`PermitRootLogin` setting
```
@ -30,6 +38,7 @@ yes -> Able to log in with password as root
```
### Password Authentication
`PasswordAuthentication` setting
```
@ -50,6 +59,7 @@ This happens, when a host key is used that has been deprecated in the locally in
Use the option `-oHostKeyAlgorithms=+<host key type>` with ssh to connect regardless.
## Windows Server
Open PowerShell as administrator
`Add-WindowsCapability -Online -Name OpenSSH.Server`
@ -66,20 +76,25 @@ Create firewall rule for port 22
`New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22`
## Linux Client
### Configuration file
`/etc/ssh/ssh_config`
### Connect to non-standard port
`$ ssh -p (port) (user)@(ip)`
### X11 passthrough
`$ ssh -X (user)@(ip)`
### ssh keys
Create new key:
`$ ssh-keygen`
*Example* for ed25519 key:
_Example_ for ed25519 key:
`$ ssh-keygen -t ed25519`
The "-C" flag can be used to add comments in ssh key files.
@ -91,17 +106,21 @@ If you are copying the ssh key from a different client, use the "-f" flag
`$ ssh-copy-id -f -i (public key file) (user)@(ip/domain)`
## Windows Client
Open PowerShell as administrator
`Add-WindowsCapability -Online -Name OpenSSH.Client`
## SSH Tunnel systemd Service
SSH tunnels can be created as systemd services
*Example tunnel:*
_Example tunnel:_
`ssh -NTfL 8080:webserver:80 user@remotehost`
### Tunnel settings
Save the file under `/etc/systemd/system/(application/tunnel name)`
```
PATH_TO_KEY=(ssh key path)
LOCAL_PORT=8080
@ -112,8 +131,10 @@ REMOTE_HOST=remotehost
```
### Tunnel service
This service can be used with multiple different "tunnel settings" files. Similar to how the wg-quick service works with different wireguard configs.
Save this file under `/etc/systemd/system/local-tunnel@.service`
```
[Unit]
Description=Setup a local tunnel to %I
@ -135,5 +156,6 @@ Finally, the tunnel can be enabled
`# systemctl enable --now local-tunnel@(application/tunnel name)`
## References
- [Windows OpenSSH Installation](https://docs.microsoft.com/en-us/windows-server/administration/openssh/openssh_install_firstuse)
- [SSH Tunnel as systemd service](https://ivanmorenoj.medium.com/ssh-tunnel-as-systemd-service-3c53bd157ac1)