during the Podcast Noah addressed how to “securely access a machine remotely”
But I don’t see where they instructions are linked in the show notes…
You mean about 24 minutes into the episode?
His preferred solution is to use a VPN.
There’s a few out there.
See episode 155 of Ask Noah Show.
Or his wireguard tutorial
Or do what I did two years ago and use this
It’s been stable and easy to use and setup on Ubuntu.
Just needed to punch a hole in my firewall and scp the the VPN profiles to my client machines. Make sure to put a passphrase on your profiles.
Apparently it now even includes wireguard!
you are correct. I forgot to add the links. I have fixed that in the shownotes.
in fact, the links that @blockhead provided are correct so thanks for that
Back in December, I mentioned some tips and pointers on how to hide an SSH server’s world-accessible port inside a Wireguard tunnel (so that without an established Wireguard tunnel, the SSH server can’t be remotely accessed):
Thanks for sharing that again @esbeeb.
Your post prompted me to finally try out wireguard.
I’m still having some issues but the main limiting factor is time:)
To be clear though, you still have to expose the wireguard port (UDP 51820 by default) to the Internet, right?
Right, wireguard port exposed.