找了个时间优化了服务器便利性和“安全性”
1. Termius访问
Termius生成三个密钥分配给三台服务器
export到~/.ssh/authorized_keys
检查authorized_keys内容正确
测试密钥&无密码登录
2. 配置ufw
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow http
sudo ufw allow https
sudo ufw allow 特殊端口/tcp
sudo ufw enable
sudo ufw status verbose
3. 配置fail2ban
sudo nano /etc/fail2ban/jail.local
[DEFAULT]
bantime = 1h
findtime = 10m
maxretry = 5
banaction = ufw
ignoreip = 127.0.0.1/8 ::1 X Y Z
[sshd]
enabled = true
port = 特殊端口
backend = systemd
sudo apt update && sudo apt install python3-systemd -y
sudo systemctl enable --now fail2ban
sudo systemctl restart fail2ban
sudo fail2ban-client status sshd
3. 配置sshd_config
sudo nano /etc/ssh/sshd_config
Port 特殊端口
PermitRootLogin no
PubkeyAuthentication yes
PasswordAuthentication no
sudo sshd -t
sudo systemctl restart ssh
4. 更改hostname
sudo hostnamectl set-hostname xxx
sudo nano /etc/hosts
修改127.0.1.1 后主机名为xxx
hostnamectl status
5. 配置互通
ssh-keygen -t ed25519 -C "from_$(hostname)" -N "" -f ~/.ssh/id_ed25519
cat id_ed25519.pub
nano ~/.ssh/authorized_keys
一共三行，Termius pub、其他两台服务器的pub
6. 配置Alias
nano ~/.bashrc
alias nc='ssh -p 特殊端口 jay@ipX'
alias cc='ssh -p 特殊端口 jay@ipY'
alias hd='ssh -p 特殊端口 jay@ipZ'
source ~/.bashrc
nc (netcup)
cc (clawcloud)
hd (hostdzire)
或者
nano ~/.ssh/config
Host nc
HostName X
Port 特殊端口
User jay
Host cc
HostName Y
Port 特殊端口
User jay
Host hd
HostName Z
Port 特殊端口
User jay
ssh nc
ssh cc
ssh hd
还可以加上“ProxyJump cc”连 xxx 之前先跳到 cc
#ssh #sshd #pub #alias #ProxyJump #authorized_keys #termius #ufw #fail2ban
Do I really want to ask #Termius support what they're doing differently when they create FIDO2 keys than the rest of the world?
You can import ed25519-sk and ecdsa-sk keys generated elsewhere just fine on both mobile and desktop (albeit the documentation on desktop hallucinates menu entries that don't exist..) however these keys don't work ANYWHERE - not mobile AND not desktop.
更改- name 和 - group 都会导致对应的持久化记录清空，所以谨慎修改名称和分组，否则需要到数据库内修改
不优雅的做法：
在vscode修改config.yaml
rm config/config.yaml
复制vscode内config.yaml内容
nano config/config.yaml
docker restart gatus
优雅的做法：
在SFTP文件管理页面/home/jay/docker/monitor/gatus/config/，（第一次选择打开方式vscode）双击文件，完成编辑，Ctrl S保存，回到termius的SFTP页面，点击Upload，回到终端，docker restart gatus
优雅在哪?()
Tận dụng máy tính văn phòng cũ, mình đã xây dựng một hệ thống HomeLab hoàn toàn quản lý từ điện thoại qua Termius và Portainer. Chi phí ~0đ, tối ưu năng lượng và tích hợp ứng dụng kiếm thu nhập thụ động để bù tiền điện. Chi tiết về cấu hình, docker stacks và hướng dẫn truy cập từ xa: [GitHub repository]. Cần gợi ý thêm dịch vụ nhẹ phù hợp phần cứng cũ. #HomeLab #SelfHosting #Termius #Portainer #Docker #DIY #IoT #LowPower #VietnameseTech #TựLàmMáyChủ
exploring this, might have to set it up
don't see how it's any different to a regular ssh session over termius or something with tailscale, but i'm curious anyway 👀
13 Popular #Software That Feel Like #OpenSource But They Are Not
#Obsidian: Personal knowledge base
#Termius: Modern SSH client
#MobaXterm: Accessing Linux from Windows
#Warp: AI-terminal
#DockerDesktop: Easy container management
#VSCode
#Discord: Developer community hub
#Vivaldi: alternative browser
#VMWare Workstation
#Ukuu: Easy kernel management on Ubuntu
#Plex: Media server
#Tailscale
#SnapStore: Open front, closed backend
#Steam: The backbone of Linux gaming
https://itsfoss.com/popular-software-open-source-feel/
termius上还可以将fido2作为keychain
突然想起来大一上学期买了一个TrustKey T120
试着配置突然想起来自己忘记了PIN
去官网找到了reset方法和管理软件
PDF：https://www.trustkey.jp/manual/biomanager_user_manual_eng_v3.3.pdf
Download：https://www.trustkeysolutions.com/en/sub/support.form
ok重置好pin🔒和指纹了
RE: https://mstdn.feddit.social/@admin/115777868914120260
想起来termius还有port forwarding这个功能，用来调试绑定在127.0.0.1的项目好方便
哥们我真的服了，为了termius的多端同步，我按照这个帖子https://linux.do/t/topic/891211 的操作，专门到淘宝买了100里拉的兑换码，用BT下载了win10镜像，vmware安装了iso，然后配置可能是内存cpu给少了，干啥都很卡，然后注册了新的outlook邮箱，更新了Microsoft Store，下载了termius，然后注册登陆，最后进去终于看到了85里拉/年的选项，结果各种失败报错，就卡在最后的subscription，然后宿舍熄灯了，不得不关掉电脑🤬🤣
搞之前还去咸鱼了，结果卖家告诉我没货？😇
#termius #ssh #vmware #windows #win10 #Microsoft #linuxdo #土耳其
Holy hell, #Termius wants to bill me $10/month for the same pro features I paid once for JuiceSSH. That's a big nope.
Phát hành Termix 1.8.0 - Phần mềm quản lý máy chủ SSH tự host thay thế cho Termius trên tất cả các nền tảng #Termix #SSH #Termius #Quản_lý_máy_chủ #Tự_host #Phần_mềm_mở #Máy_chủ_SSH #Quản_lý_máy_chủ_SSH
https://www.reddit.com/r/selfhosted/comments/1orp1e4/termix_180_selfhosted_ssh_serer_management/
Ra mắt Termix 1.8.0, giải pháp tự lưu trữ thay thế Termius cho tất cả các nền tảng.Termix cung cấp truy cập SSH, tunnel SSH, quản lý file từ xa và nhiều tính năng khác. #Termix #SSH #Termius #TựLưuTrữ #QuảnLýServer #MáyChủ #LINUX #WINDOW #MACOS #IOS #ANDROID #SelfHosted #ServerManagement
https://www.reddit.com/r/selfhosted/comments/1orp1e4/termix_180_selfhosted_ssh_serer_management/
New ZuRu Malware Variant Weaponizes Termius SSH Client to Attack macOS Users
https://cybersecuritynews.com/new-zuru-malware-variant-weaponizes-termius-ssh-client/
#Infosec #Security #Cybersecurity #CeptBiro #ZuRu #MalwareVariant #Termius #SSHClient #macOSUsers
Well, here’s another app I am removing from all my devices. “Termius” seemed like a very good ssh client for iOS devices. Had lots of good features, was relatively stable.
But their licensing is batshit. $10/mo for a HOBBIEST license. Forever. Never ending. For a fucking terminal program.
Eat shit guys. The company I work for has a staggeringly complex pair of programs that are the top tools in the industry, and they license THOSE for $10/mo.
Anyone else finding #termius extremely unstable these last few days??
For SSH client on Linux I'm using Tilix (default client in Ubuntu Budgie). For my phone I'm using Termius, which is very feature rich. On my newly acquired tablet this client is even better. And today a new version of the app came out, making it even slicker. Now I only need to get myself a bluetooth fold-able keyboard and I'm golden for on the road.
