ttimasdf/00-Systemd_service_for_autossh.md

## 00-Systemd_service_for_autossh.md

      
    Raw
  

              00-Systemd_service_for_autossh.md
            
          
    Usage

curl -sSL https://gist.githubusercontent.com/ttimasdf/ef739670ac5d627981c5695adf4c8f98/raw/autossh@host1 | \
  sudo tee /etc/default/autossh@example
curl -sSL https://gist.githubusercontent.com/ttimasdf/ef739670ac5d627981c5695adf4c8f98/raw/[email protected] | \
  sudo tee /etc/systemd/system/[email protected]

sudo useradd -g nogroup -s /bin/false -m tunnel
sudo -u tunnel mkdir -p ~tunnel/.ssh  # and copy your private key here
sudo -u tunnel nano ~tunnel/.ssh/config  # add host and key configs here
sudo -u tunnel ssh example.com  # just make sure to add your host to `known_hosts`

# Add the hostname and forwards to /etc/default/autossh@example
sudo nano /etc/default/autossh@example
# ready to go!
systemctl start [email protected]

systemctl status [email protected]
journalctl -fu autossh@example


## [email protected]
[Unit]
Description=Keeps an ssh tunnel to %I open
After=network-online.target ssh.service

[Service]
User=tunnel
# no monitoring
Environment="AUTOSSH_PORT=0"
# Disable gatetime behaviour
Environment="AUTOSSH_GATETIME=0"
EnvironmentFile=/etc/default/autossh@%i
RestartSec=3
Restart=always

# -NT Just open the connection and do nothing (not interactive, no tty alloc)
# use /usr/bin/ssh instead of autossh is good as well
ExecStart=/usr/bin/autossh -NT -o "ExitOnForwardFailure=yes" $SSH_OPTIONS ${TARGET_HOST} $FORWARDS
TimeoutStopSec=10

[Install]
WantedBy=multi-user.target

## autossh@host1
# Options for [email protected]
# Place it at /etc/default

# Save all your credential/user/port related config in ~/.ssh/config is strongly recommanded
# Leave hostname here only
TARGET_HOST=remote.example.com

# -L LOCALPORT:IP_ON_EXAMPLE_COM:PORT_ON_EXAMPLE_COM
# can set multiple forwardings here
FORWARDS=-L 7474:127.0.0.1:7474

# === Settings below for ADVANCED users only ===

SSH_OPTIONS=-o "ServerAliveInterval=10" -o "ServerAliveCountMax=3"
AUTOSSH_PORT=0
AUTOSSH_GATETIME=0
	[Unit]
	Description=Keeps an ssh tunnel to %I open
	After=network-online.target ssh.service

	[Service]
	User=tunnel
	# no monitoring
	Environment="AUTOSSH_PORT=0"
	# Disable gatetime behaviour
	Environment="AUTOSSH_GATETIME=0"
	EnvironmentFile=/etc/default/autossh@%i
	RestartSec=3
	Restart=always

	# -NT Just open the connection and do nothing (not interactive, no tty alloc)
	# use /usr/bin/ssh instead of autossh is good as well
	ExecStart=/usr/bin/autossh -NT -o "ExitOnForwardFailure=yes" $SSH_OPTIONS ${TARGET_HOST} $FORWARDS
	TimeoutStopSec=10

	[Install]
	WantedBy=multi-user.target
	# Options for [email protected]
	# Place it at /etc/default

	# Save all your credential/user/port related config in ~/.ssh/config is strongly recommanded
	# Leave hostname here only
	TARGET_HOST=remote.example.com

	# -L LOCALPORT:IP_ON_EXAMPLE_COM:PORT_ON_EXAMPLE_COM
	# can set multiple forwardings here
	FORWARDS=-L 7474:127.0.0.1:7474

	# === Settings below for ADVANCED users only ===

	SSH_OPTIONS=-o "ServerAliveInterval=10" -o "ServerAliveCountMax=3"
	AUTOSSH_PORT=0
	AUTOSSH_GATETIME=0