| |
FWIW: I (@rondy) am not the creator of the content shared here, which is an excerpt from Edmond Lau's book. I simply copied and pasted it from another location and saved it as a personal note, before it gained popularity on news.ycombinator.com. Unfortunately, I cannot recall the exact origin of the original source, nor was I able to find the author's name, so I am can't provide the appropriate credits.
| #Routing plex traffic through an SSH tunnel | |
| This guide creates a reverse SSH tunnel to route all Plex server traffic through it. | |
| Step 2 is done on the tunnel, all other steps are done on the plex server. | |
| #1. Setup SSH keys (if you already have key based authenthication setup skip to step 2) | |
| On plex server: | |
Download the latest ugw3 package from https://github.com/Lochnair/vyatta-wireguard/releases and install it on your USG using dpkg -i wireguard-ugw3-<version>.deb.
cd /config/auth
umask 077
mkdir wireguard
cd wireguard
wg genkey > wg_private.key
wg pubkey < wg_private.key > wg_public.key
| default['sshd']['sshd_config']['AuthenticationMethods'] = 'publickey,keyboard-interactive:pam' | |
| default['sshd']['sshd_config']['ChallengeResponseAuthentication'] = 'yes' | |
| default['sshd']['sshd_config']['PasswordAuthentication'] = 'no' |
| -- original code: https://github.com/ericelliott/cuid | |
| -- Add the "plv8" extension | |
| create extension if not exists "plv8"; | |
| -- Add the "pgcrypto" extension | |
| create extension if not exists "pgcrypto"; | |
| \dx | |
| -- Connect a database |