i want to remotely ssh to my home server, and I was wondering if I could just forward port 22 with disabling password login and use pubkey authentication will be safe enough?
i want to remotely ssh to my home server, and I was wondering if I could just forward port 22 with disabling password login and use pubkey authentication will be safe enough?
I wouldn’t open up 22 to the world. I would change the port at a minimum or use a VPN.
Why not both?
With a VPN there’s no need to change the port. Unless you change all of your ssh ports to another set pretty across all of your hosts, you’re just asking for a headache at scale.
I have a “prep script” that takes care of everything.
It takes less than 2 minutes to run on a fresh install and does all kind of fun things.