AhmedBarayez

I’m in the process of selecting a web based ssh app to add all my ssh servers in one place and i’ve tried apache guacamole and it’s been working fine,

Also I’m trying sshwifty but the thing is, sshwifty doesn’t have a login interface before accessing the data so it’s not the best thing, so I’ve made an install and asking if that’s the best for my current setup..

I actually don’t have authelia nor authentik to put it behind 2fa app, and i don’t plan to install one soon BUT i installed sshwifty on oci vm that have a public ip of 123.123.123.123, and i only allowed port 8182 for this ip address so i added in the security list 123.123.123.123/32 so no one can access this app except localhost, and then i installed cloudflare tunnel into this vm and activated otp by email and allowed only my email.

So my question is, is this secure enough?

I’m using mikrotik as my main router with ip 10.0.10.254

And I got a new desktop and turned it into proxmox server with ip 10.0.10.253

And installed adguard home to be my local dns server with ip of 10.0.10.250 and changed how it resolve hostnames by using 1.1.1.1 & 8.8.8.8

I also have another adguard server vm hosted on cloud with ip 190.190.190.200 for example

Configured mikrotik to use adguard as my primary dns server & cloud as secondary in (ip>dns)

But it only resolves hostnames when Allow remote requests is checked, when i uncheck it & remove my cloud dns vm it doesn’t resolve anything

Also in adguard quiery log the only client ip is my miktotik 10.0.10.254 it should be my local devices ip

What could be wrong?