getumbrel / umbrel-os

umbrelOS for Raspberry Pi 4 (only). Covert your Raspberry Pi into a home server in one click. For other hardware, checkout https://github.com/getumbrel/umbrel

Home Page:https://umbrel.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

security note (ssh simple optim + fail2ban)

aboulaboul opened this issue · comments

for "advanced" or paranoid user like me, a little fine tuning note on ssh, could be a good thing:
2 steps:

copying public key to umbrel

ssh-copy-id umbrel@umbrel.local

then configuring ssh to disable login by password

sudo nano /etc/ssh/sshd_config
and then changing
#PasswordAuthentication yes
to
PasswordAuthentication no

And maybe for those who don't want to touch this, at least installing fail2ban
sudo apt install fail2ban