>>107746555
Yeah, keys are fine. But I also employ fail2ban with 1 month long bans because everytime I do journalctl -b I don't want to see that jeets have turned it into a designated shitting journal with 20 fails every minute.
I'm also behind a NAT so I first open a reverse ssh proxy to my VPS, which is setup so that whenever Network.target is reached, it's established. This way it doesn't just die when I restart router.
Then I can log into my PC like so ssh vps@1.1.1.1 "ssh -p 9000 bedroom@localhost"
, where 9000 is my reverse ssh port