send_ip_telegram.service
=> /etc/systemd/system/send_ip_telegram.service
send_ip_telegram.sh
=> /usr/local/bin/send_ip_telegram.sh
99-send-ip-to-telegram
=> /lib/dhcpcd/dhcpcd-hooks/99-send-ip-to-telegram
autossh-tunnel.service
=> /etc/systemd/system/autossh-tunnel.service
sudo adduser --disabled-password --gecos "" tunneluser
sudo usermod -s /usr/sbin/nologin tunneluser
sudo mkdir /home/tunneluser/.ssh
sudo chown tunneluser:tunneluser /home/tunneluser/.ssh
sudo chmod 700 /home/tunneluser/.ssh
sudo chown tunneluser:tunneluser /home/tunneluser/.ssh/authorized_keys
sudo chmod 600 /home/tunneluser/.ssh/authorized_keys
sudo ufw allow 2222/tcp
/etc/ssh/sshd_config
:
...
GatewayPorts yes
AllowTcpForwarding yes
...
...
Match User tunneluser
ForceCommand /usr/bin/echo 'This account is restricted to port forwarding only.'
AllowTcpForwarding yes
sudo systemctl restart sshd
[Optional; cause service used] From source (tunnel issuer) - Initiate tunnel:
autossh -N -R 2222:localhost:22 tunneluser@<hostname> -I <identityfile>
From user (not from server and tunnel issuer):
ssh sourceuser@<hostname> -I <identityfile> -p 2222