Post #4384806

things I've been working on in regards to botanica - SSH over Yggdrasil, with simple one-command setup Thanks to yggdrasil making it really easy to generate a new config, I've included a little script that 1) Generates a config (including a new key) 2) Sets up peers and listen directives 3) Restarts yggdrasil to apply changes 4) Prints out your IP Address You can run this at any time to reset your IP. I'll also make sure that password logins for SSH are disabled, and I'll see if I can do the same for Cockpit, so that to login you must use the cockpit "desktop" application which uses SSH under the hood. Last thing to do is make sure logins are still possible on LAN with a password, but not over yggdrasil, and guiding the user to adding through adding their key. - further work on figuring out proxying the biggest issue with botanica is networking. I don't want to rely on Cloudflare, or on the end-user already having a VPS that Caddy could be installed on. Yet, I still want to have some kind of solution for people to make their servers accessible on the web with minimal effort. At this point in time, I don't see a way around providing some kind of public proxying service, but that's difficult as I could not end-to-end-encrypt that in a way which would keep us safe. It's a Tor Exit Node situation. #botanica #matrix