3 ms·
I feel the same way. I wish they offered a second factor for SSH auth — when I last looked, they didn’t. I also send myself notifications any time a failed or
by heywoodlh 2y ago
I feel the same way. I wish they offered a second factor for SSH auth — when I last looked, they didn’t.
I also send myself notifications any time a failed or successful SSH login attempt occurs by tailing the ssh service with journalctl. When I last tried Tailscale SSH, it didn’t log anything to journalctl and so my self-notification via journalctl method did not work.
- luckman212 2y agodo you do this with cron, fail2ban, or some other mechanism?
- heywoodlh 2y agoSorry for the delay, just barely saw this! I use journalctl to follow the log. My NixOS module for it is here: https://github.com/heywoodlh/nixos-configs/blob/master/nixos/roles/security/sshd-monitor.nix https://github.com/heywoodlh/nixos-configs/blob/master/nixos... If that isn’t clear, let me know and I can send my Ansible example :) EDIT: To be more precise I set up the monitoring service as a systemd service