Level 80
@benjamin1509 It’s a good idea if you 100% know the IPs you need to white-list, and those IPs are not going to change. Otherwise you risk misconfiguring something and potentially locking yourself out of your own services.
1 like
May 25, 2022
6
Level 8
Block IPs except for Forge on port 22
Hey everyone!
I have a DigitalOcean droplet and I want to block all IPs on port 22 except for Forge's IP and my IP. Is this a good idea? also it's not clear to me what IPs to allow in my DigitalOcean Firewall, is it both Forge's Public and Private IP?
Level 8
Otherwise you risk misconfiguring something and potentially locking yourself out of your own services.
This is what I am scared of.
Level 54
use other bigger port number to map it and ssh key https://www.digitalocean.com/community/tutorials/how-to-configure-ssh-key-based-authentication-on-a-linux-server
1 like
Level 8
@siangboon This will affect Forge's config right?
Level 54
@benjamin1509 I don't use forge, but I believe the port is able to be changed at forge side https://medium.com/@taylorotwell/custom-ssh-ports-on-forge-f435ab3431bf
and there is SSH key setting if not mistaken.
1 like
Level 8
@siangboon Thank you. I'll check it out.
Please or to participate in this conversation.