Secure Tunnel Service - Revision history

Bryan at 04:54, 18 January 2025

2025-01-18T04:54:25Z

Bryan at 04:54, 18 January 2025

2025-01-18T04:54:09Z

Bryan at 08:10, 10 January 2025

2025-01-10T08:10:42Z

Bryan at 08:07, 10 January 2025

2025-01-10T08:07:37Z

Bryan: Created page with "Here's a simple ssh based way setup a remote tunnel to a server. root@retropie:~# cat /etc/systemd/system/secure-tunnel@.service [Unit] Description=Setup a secure tunnel t..."

2025-01-10T07:11:34Z

Created page with "Here's a simple ssh based way setup a remote tunnel to a server. root@retropie:~# cat /etc/systemd/system/secure-tunnel@.service [Unit] Description=Setup a secure tunnel t..."

New page

Here's a simple ssh based way setup a remote tunnel to a server.

root@retropie:~# cat /etc/systemd/system/secure-tunnel@.service
[Unit]
Description=Setup a secure tunnel to %I
After=network.target

[Service]
EnvironmentFile=/etc/default/secure-tunnel@%i
#User=${USER}
ExecStart=/usr/bin/ssh -NT -F /etc/default/secure-tunnel.config ${TARGET}

# Restart every >2 seconds to avoid StartLimitInterval failure
RestartSec=5
Restart=always

[Install]
WantedBy=multi-user.target

cat /etc/default/secure-tunnel@keekles
USER=emiliano
TARGET=keekles

root@retropie:~# cat /etc/default/secure-tunnel.config
Host keekles
HostName keekles.org
User emiliano
IdentityFile /home/emiliano/.ssh/id_ed25519
RemoteForward 34568 127.0.0.1:22
ServerAliveInterval 60
ExitOnForwardFailure yes

@@ Line 24: / Line 24: @@
           User
           IdentityFile  /root/.ssh/id_ed25519
-          RemoteForward 34500 127.0.10.1:22
+          RemoteForward 34500 127.0.0.1:22
           ServerAliveInterval 60
           ExitOnForwardFailure yes

← Older revision		Revision as of 08:10, 10 January 2025
Line 28:		Line 28:
	systemctl enable secure-tunnel@keekles.service		systemctl enable secure-tunnel@keekles.service
	systemctl status secure-tunnel@keekles.service		systemctl status secure-tunnel@keekles.service
		+
		+
		+	= Connecting to the remote device via the server =
		+
		+	$ ssh bryan@127.0.0.1 -p 34500 -J keekles

@@ Line 1: / Line 1: @@
 Here's a simple ssh based way setup a remote tunnel to a server.
-  root@retropie:~# cat /etc/systemd/system/secure-tunnel@.service
+  root@raspberrypi:~# ssh-keygen -t ed25519
   [Unit]
   Description=Setup a secure tunnel to %I
@@ Line 15: / Line 17: @@
   [Install]
   WantedBy=multi-user.target
+  EOF
-−
-  root@retropie:~# cat /etc/default/secure-tunnel.config
+  cat > /etc/default/secure-tunnel.config <<'EOF'
   Host keekles
           HostName keekles.org
           User
           IdentityFile  /root/.ssh/id_ed25519
-          RemoteForward 34500 127.0.0.1:22
+          RemoteForward 34500 127.0.10.1:22
           ServerAliveInterval 60
           ExitOnForwardFailure yes
   systemctl enable secure-tunnel@keekles.service

@@ Line 7: / Line 7: @@
   [Service]
- EnvironmentFile=/etc/default/secure-tunnel@%i
+  ExecStart=/usr/bin/ssh -NT -F /etc/default/secure-tunnel.config  %i
   # Restart every >2 seconds to avoid StartLimitInterval failure
@@ Line 18: / Line 16: @@
   WantedBy=multi-user.target
   root@retropie:~# cat /etc/default/secure-tunnel.config
   Host keekles
           HostName keekles.org
-          User emiliano
+          User
-          IdentityFile  /home/emiliano/.ssh/id_ed25519
+          IdentityFile  /root/.ssh/id_ed25519
-          RemoteForward 34568 127.0.0.1:22
+          RemoteForward 34500 127.0.0.1:22
           ServerAliveInterval 60
           ExitOnForwardFailure yes