Complete guide to secure SSH access on Proxmox VE 9+ using key authentication, least privilege principle, and hardened configuration
Bluesky SSH Authentication #2
Addressing the glaring omissions from yesterday’s proof of concept, such as the fact that you could sign in as any user, you couldn’t revoke access, all hosts had the same users, and there was no mapping between Bluesky handles and POSIX users, I have updated mtelvers/bluesky-ssh-key-extractor and newly published mtelvers/bluesky-collection.
Proxies all the way down.
A couple of days ago, exe.dev raised a lot of money1. I decided to poke around with it a little, and signed up. Their trial is 7 days long, so despite having no actual plans, I just started doing stuff. In doing so, I noticed a few interesting things that I thought were worth a quick writeup: I didn’t have to configure an SSH key to be able to ssh exe.dev. I could SSH to my VM despite not having a unique IP and no support for SNI in SSH. The GitHub Integration, which allowed me to clone private repositories, didn’t require any host-side configuration. The second item, SSH with non-unique IPs, despite SSH having no host header or SNI equivalent, is already covered by exe.dev themselves, so I won’t go through it here2. The other two, I want to run through quickly.
UCAN - User Controlled Authorization Network
A trustless, secure, local-first, user-originated, distributed authorization scheme.
Linux Firewalls: How to Actually Secure a Cloud Server (iptables, nftables, firewalld, ufw)
A practical guide to the four major Linux firewall technologies - iptables, nftables, firewalld, and ufw. Covers real-world cloud server hardening with concrete examples, from locking down SSH to b...
An Excruciatingly Detailed Guide To SSH (But Only The Things I Actually Find Useful)
Oh you like SSH? Name every flag.
The one good feature of macOS Tahoe 26
Complete OS Guide: Proxmox How It Works, Orientation and Curiosities – LINUXMIND.DEV
Proxmox is an open-source server virtualization environment that combines two virtualization technologies: kernel-based virtual machines (KVM) and Linux containers (LXC). It offers a unified management interface for running virtual machines, containers, storage, and network configurations in a single platform. Widely adopted by enterprises, small businesses, and home lab enthusiasts, Proxmox simplifies deployment and administration of virtual infrastructure.
Demonstrating Proof-of-Possession (DPoP) - Auth0 Docs
Learn how to use Demonstrating Proof-of-Possession (DPoP) to sender constrain access tokens in Auth0.
Git: The complete guide to sign your commits with an SSH key
Please read the introduction I wrote about why signing your git commits ...
Keyhive: Local-first access control
Keyhive is a project exploring local-first access control. It aims to provide a firm basis for secure collaboration, similar to the guarantees of private chat but for any local-first application.
How to self-host with Tailscale: Installing Proxmox and hardware choices
In this tutorial, we’ll start by picking out hardware and installing Proxmox. Tailscale can then securely connect to your self-hosted storage.
Proxmox Server Solutions
Proxmox develops powerful and efficient open-source server solutions like the Proxmox VE platform, Proxmox Backup Server, and Proxmox Mail Gateway.
