How to Hide Your Server's SSH Behind Tailscale and Shut Port 22

·1 views

Security-conscious server administrators can eliminate public SSH exposure by routing connections through Tailscale, a WireGuard-based private mesh network that assigns each device a stable 100.x address invisible to the open internet. Once a server and a laptop share the same Tailscale network, SSH traffic flows over that private address, making a publicly open port 22 unnecessary. Users can choose between standard OpenSSH routed through Tailscale or Tailscale's own SSH daemon, which delegates authentication to Tailscale identity rules instead of OpenSSH. A critical precaution is disabling key expiry for the server in the Tailscale admin console, since the default 180-day timeout can permanently lock administrators out of a headless machine. UFW firewall rules should be updated to trust the Tailscale interface before the public SSH rule is removed, and the provider's browser console should be kept accessible as a recovery fallback.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

DEV Community Kicks Off Meme Monday With Community-Sourced Cover Image

DEV Community has launched its recurring Meme Monday feature, a lighthearted weekly tradition on the platform. The cover image for this edition was sourced from the previous thread's contributions. DEV emphasizes that it operates as an inclusive space for all participants. To maintain respectful engagement, moderators will downvote any humor deemed to be in poor taste.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

SQL Views vs Temp Tables: Key Performance and Use-Case Differences Explained

Data analyst Michael Nocito published a technical comparison of SQL views and temporary tables on DEV Community in August 2026. A view stores only the query text and re-executes it on every read, while a temporary table stores the actual result rows after a single execution. Benchmarks on a 400,000-row SQLite orders table showed that reading a view took 467.6 ms per query, versus effectively zero milliseconds for the equivalent temp table. Over ten consecutive reads, the view accumulated nearly 4,700 ms in total execution time compared to just 0.2 ms for the temp table. The article concludes that temp tables are preferable when the same expensive aggregate is queried multiple times within a session, while views suit scenarios where up-to-date data is required on each read.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

SQL Subqueries vs CTEs: Why Named Steps Are Easier to Debug

Data analyst Michael Nocito published a technical guide on August 8, 2026, explaining the practical difference between SQL subqueries and Common Table Expressions (CTEs). Both approaches produce identical query logic and results, but CTEs allow developers to inspect intermediate outputs at each step, something nested subqueries do not permit. The guide demonstrates this using a 16-row orders dataset loaded in DuckDB, with queries that transfer directly to PostgreSQL, Redshift, and Snowflake. Nocito outlines four positions where subqueries can appear in SQL and notes that most errors stem from returning the wrong data shape for a given position. His core advice is to lift the innermost subquery into a named CTE and run a row count against it to verify what the rest of the query is actually working with.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Lisbon Agency Replaced 12 Client Tools With One Custom-Built Workspace

SharpHaw, a small growth-focused agency based in Lisbon, built an internal platform called SharpOS to replace the fragmented stack of roughly a dozen tools typically used to manage client engagements. Founder and senior engineer behind the agency found that clients were often confused about what work was being done, since they only had access to one or two tools out of many in use. Rather than adopting a client portal — which the team viewed as a secondary layer where work gets copied rather than created — they built a single workspace where the actual work happens and clients can follow along in real time. SharpOS consolidates functions ranging from project boards and audits to automations, analytics, and a media center, serving clients across 19 European countries. The agency notes that cost savings were not the primary motivation; the core goal was making the work continuously visible to clients without requiring them to ask for updates.

0 comments Read more at DEV Community