security note (ssh simple optim + fail2ban)
aboulaboul opened this issue · comments
Alex Boulangé commented
for "advanced" or paranoid user like me, a little fine tuning note on ssh, could be a good thing:
2 steps:
copying public key to umbrel
ssh-copy-id umbrel@umbrel.local
then configuring ssh to disable login by password
sudo nano /etc/ssh/sshd_config
and then changing
#PasswordAuthentication yes
to
PasswordAuthentication no
And maybe for those who don't want to touch this, at least installing fail2ban
sudo apt install fail2ban