I'd like to set up a RPI at a relative's house. (The RPI will likely run Debian + TVHeadEnd.)
I'd like to have remote access to the RPI.
A simple way to achieve this would be to create a systemd unit that runs autossh to a public host and reverse tunnels 22. I can set up that quickly.
An alternative would be to set up a true VPN. I actually already have two VPNs in my infra, but this wouldn't be pleasant:
I just kinda wish autossh shipped a systemd unit ready to go, I guess. But is there something plug and play which maybe only requires ssh?
I'd like to have remote access to the RPI.
A simple way to achieve this would be to create a systemd unit that runs autossh to a public host and reverse tunnels 22. I can set up that quickly.
An alternative would be to set up a true VPN. I actually already have two VPNs in my infra, but this wouldn't be pleasant:
- I use ocserv/Cisco Anyconnect for remote access. But it's set up for PAM Linux user password authentication (actually, FreeIPA users), and I don't think that's suitable for this use case. Also I'm lazy to add another authentication method (although FreeIPA has a CA and it would be nice to set up cert-based authentication, but it seems too much work).
- I use tinc for connecting networks in a mesh setup. But set up is through Ansible playbooks which I would need to expand considerably for a "roaming" device. Plus provisioning/testing with RPIs is a bit annoying.
I just kinda wish autossh shipped a systemd unit ready to go, I guess. But is there something plug and play which maybe only requires ssh?
