benya/rmm-openwrt
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use host-managed reverse tunnel key

Browse Source
This commit is contained in:
benya
2026-06-04 15:31:36 +03:00
parent 3cc9385f14
commit 89a82f64ce
5 changed files with 28 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
deploy/tunnel/entrypoint.sh
View File

@@ -15,17 +15,24 @@ if [ ! -f /data/ssh_host_rsa_key ]; then
ssh-keygen -q -t rsa -b 3072 -N '' -f /data/ssh_host_rsa_key
fi
if [ ! -f /data/router_tunnel_key ]; then
ssh-keygen -q -t ed25519 -N '' -C 'rmm-router-tunnel' -f /data/router_tunnel_key
if [ -f /bootstrap/router_tunnel_key.pub ]; then
printf 'restrict,port-forwarding %s\n' "$(cat /bootstrap/router_tunnel_key.pub)" > /data/authorized_keys
else
if [ ! -f /data/router_tunnel_key ]; then
ssh-keygen -q -t ed25519 -N '' -C 'rmm-router-tunnel' -f /data/router_tunnel_key
fi
if [ ! -f /data/authorized_keys ]; then
printf 'restrict,port-forwarding %s\n' "$(cat /data/router_tunnel_key.pub)" > /data/authorized_keys
fi
fi
if [ ! -f /data/authorized_keys ]; then
printf 'restrict,port-forwarding %s\n' "$(cat /data/router_tunnel_key.pub)" > /data/authorized_keys
chmod 0600 /data/ssh_host_ed25519_key /data/ssh_host_rsa_key /data/authorized_keys
chmod 0644 /data/ssh_host_ed25519_key.pub /data/ssh_host_rsa_key.pub
if [ -f /data/router_tunnel_key ]; then
chmod 0600 /data/router_tunnel_key
chmod 0644 /data/router_tunnel_key.pub
fi
chmod 0600 /data/ssh_host_ed25519_key /data/ssh_host_rsa_key /data/router_tunnel_key /data/authorized_keys
chmod 0644 /data/ssh_host_ed25519_key.pub /data/ssh_host_rsa_key.pub /data/router_tunnel_key.pub
chown rmm-tunnel:rmm-tunnel /data/authorized_keys
echo "Tunnel SSH endpoint ready. Install /data/router_tunnel_key on each approved router."
echo "Tunnel SSH endpoint ready."
exec /usr/sbin/sshd -D -e -f /etc/ssh/sshd_config