Depends what you mean by setting up ssh. Installing sshd, sure. Opening up ports, calling your isp to buy dedicated ip if they even offer one, getting a domain, setting up ddns…
- 0 Posts
- 13 Comments
- qwerty@discuss.tchncs.detoSelfhosted@lemmy.world•Remote connection over internet?English1·9 days ago
- qwerty@discuss.tchncs.detoSelfhosted@lemmy.world•Remote connection over internet?English11·9 days ago
That’s not always an option and when it is, setting it up is often more complicated and less secure than using a relay server. Honestly, the fastest (to setup), easiest and most secure option would be ssh server as a tor hidden service. Everything is handled by tor out of the box, .onion domain name, nat hole punching, E2EE, port scanning bots… all taken care of, no need for opening ports, static ip, dns, ddns, fail2ban, worrying that there’s a 0 day or that you misconfigured something. No one can exploit you service if nobody knows it exists.
- qwerty@discuss.tchncs.detoSelfhosted@lemmy.world•Remote connection over internet?English6·9 days ago
If you can rent a vps you can use it as a relay server. You setup sshd on your home pc and ssh to the vps with the -R flag.
ssh -R 8022:localhost:22 user@relayAs long as the connection is live you can ssh to the server via relay. If you set GatewayPorts to yes on the relay in sshd_config then it will act as an open port on your home pc and anyone will be able to connect to it over the internet with
ssh -p 8022 user@relayso make sure to secure it correctly, only allow ssh keys etc. If you set GatewayPorts to no, then only clients connected to the relay will be able to connect to the server, this is a must have if you’re gonna use unsecure protocols like VNC. First ssh to the server
ssh user@relaynext
ssh user@localhost -p 8022or one line, especially useful when combined with -i to point at the home pc’s ssh key stored on the client
ssh -J user@relay user@localhost -p 8022You can also setup VNC over ssh. Add 2nd -R on home pc with vnc ports
ssh -R 5901:localhost:5901 user@relayor together
ssh -R 8022:localhost:22 -R 5901:localhost:5901 user@relayOn the client ssh with the -L flag
ssh -L 5091:localhost:5091 user@relayNow you can connect your VNC client to
localhost:1
- qwerty@discuss.tchncs.detoLemmy Shitpost@lemmy.world•Which is worse: not wanting kids, or wanting them too much?176·27 days ago

Love presenting politically motivated murder as a joke.
A father of two died and a family is forever destroyed. lol, amirite?
- qwerty@discuss.tchncs.detoTechnology@lemmy.world•EU’s new social media child protection rules to require all social media accounts to produce state ID - Leaked documents suggest that some existing accounts will also be subject to identification che…English13·1 month ago
Great, this might actually kill centralized social media in a long run. Future generations will grow up on decentralized web because it will be the only one they can access.
North Koreans may have GNI per capita of $1800 compared to $61900 of South Koreans, healthcare index of 37.5 compared to 82.9, infant mortality of 22.2/1000 vs 2.9/1000, maternal mortality of 107/100k vs 8/100k, internet access below 1%, purchasing power of 18.9 vs 116.6 and 42% of them may be undernourished, but at least they get to spend their, on average, 10 years shorter life compared to South Koreans serving his Excellency, Supreme Leader Kim Jong Un.
- qwerty@discuss.tchncs.detoTechnology@lemmy.world•Stop Killing The Internet: No Digital ID & No Age Verification | European Citizens' InitiativeEnglish131·2 months ago
We call on the European Commission to propose legislation ensuring that digital identity and age-assurance systems used to access online services in the Union remain voluntary, privacy-preserving and non-discriminatory. Citizens must not be forced to identify themselves to access lawful online content or services unless strictly necessary, proportionate and provided by law. The legislation should require anonymous or pseudonymous proof-of-age, data minimisation, selective disclosure, open-source implementation, independent security audits, prohibition of cross-service tracking by relying parties, and equivalent alternatives for citizens who do not use a digital wallet.
Yeah, nah.
if we as a society decided that homicide and regicide were of the same magnitude, we’d call them both murder.
we don’t.
If you change the definition of air to mean
An open, generally public way for the passage of vehicles, people, and animals.
you’ll be able to walk on air, but as it stands, you can not walk on air.
Killing tapeworms isn’t murder because only killing a human can be murder.
I didn’t say humans aren’t animals, I said tapeworms aren’t humans. They are animals. They are not humans.
Tapeworm is an animal not a human.
If you’re behind cgnat opening ports on your router won’t do you any good. You have to call your isp and ask them for a dedicated public ip, usually for a price if they offer one at all. If that ip is static you can remember it, if not, you need ddns. If you’re one of the lucky few not behind cgnat then yeah, your setup will be the simplest possible, but if you are, like the majority of people these days, it’s one of the most complicated.