A comprehensive hands-on guide to deploying web apps with a low-cost and simple self-managed solution.

  • lime!@feddit.nu
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    1
    ·
    2 days ago

    non-standard ssh port is actually a pretty good security measure. there are thousands of automated tools just hammering the standard ports of every ip they can reach, and if you have password auth enabled they’ll get in eventually.

    • Damarus@feddit.org
      link
      fedilink
      English
      arrow-up
      6
      ·
      2 days ago

      Then disable password auth and ban their IP? SSH is not even a common intrusion path, those crawlers look for open gates, nothing else.

      • lime!@feddit.nu
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 days ago

        oh yeah that’s better. but it’s also harder for a newbie. not a lot harder, but still.