Self Hosted - Self-hosting your services.

11230 readers

1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules

No harassment
crossposts from c/Open Source & c/docker & related may be allowed, depending on context
Video Promoting is allowed if is within the topic.
No spamming.
Stay friendly.
Follow the lemmy.ml instance rules.
Tag your post. (Read under)

Important

Beginning of January 1st 2024 this rule WILL be enforced. Posts that are not tagged will be warned and if not fixed within 24h then removed!

Lemmy doesn't have tags yet, so mark it with [Question], [Help], [Project], [Other], [Promoting] or other you may think is appropriate.

Cross-posting

!everything_git@lemmy.ml is allowed!
!docker@lemmy.ml is allowed!
!portainer@lemmy.ml is allowed!
!fediverse@lemmy.ml is allowed if topic has to do with selfhosting.
!selfhosted@lemmy.ml is allowed!

If you see a rule-breaker please DM the mods!

founded 3 years ago

MODERATORS

Zoe8338@lemmy.ml

dogmuffins@lemmy.ml

testman@lemmy.ml

Better SSH key handling? (lemmy.remotelab.uk)

submitted 1 year ago by mbell@lemmy.remotelab.uk to c/selfhost@lemmy.ml

13 comments fedilink hide all child comments

Hey folks, I have multiple VMs and personal machines across multiple cloud providers and I'm beginning to get frustrated with ssh key management. Each personal machine has it's own key so if I lose it or it's compromised I can just remove the key from the vms but it's starting to get tedious making sure everything is up to date and any new keys are added.

Are there any solutions out there that would help?

you are viewing a single comment's thread
view the rest of the comments

[–] mark@social.cool110.xyz 1 points 1 year ago (1 children)

@mbell You need a single source of truth to store the public keys in, then set AuthorizedKeysCommand in the SSHD config to a script that looks them up from there. I use this one for LDAP.

[–] mbell@lemmy.remotelab.uk 1 points 1 year ago

This is an interesting solution, I don't have LDAP running at the moment but it's on my list of things to add to my setup.