i want to remotely ssh to my home server, and I was wondering if I could just forward port 22 with disabling password login and use pubkey authentication will be safe enough?
i want to remotely ssh to my home server, and I was wondering if I could just forward port 22 with disabling password login and use pubkey authentication will be safe enough?
Port forwarding opens an attack surface- whatever service you’re exposing is the “attack surface” so make sure it’s secure.
This is absolutely a very strong/good hardening first-step.
Hell yeah. Very strong. Just keep that key safe (don’t post it on the Internet, put it somewhere insecure or public, etc. Also recommended to password protect the key for extra safety.
Additional steps you could take if you were worried: two-factor authentication, usually easy to setup and effective. Fail2ban or other IP blockers, takes more work and setup. Rate-limiting is a basic feature most ssh services have (e.g. more than 3 failed attempts = 5 minute lockout).
But honestly keys-only, IMHO, is the safest 👍