I want to allow certain trusted users the ability to take down my lemmy instance or reboot it or x, y, z actions in case things go wrong or there is a security incident.

Ideally I would want to have some sort of admin interface that’s secure and tested and allow these users to have some sort of login and from there have the ability to execute certain actions that could correspond to a “break glass in case of emergency” scenario.

I’ve been pointed at https://www.portainer.io/ but they seem to have a steep price for the limited use-case that I would be giving it.

I know about some admin interfaces like webmin, but I don’t know which one allow you to create very restricted users or just give users the ability to execute some limited pre-defined commands.

Thank you <3

  • oranki@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    5
    ·
    1 year ago

    I’d go the SSH + sudo way.

    Sudo can be quite finely tuned to only allow specific commands. If you want to lock the SSH session further, look into rbash.

    • bignavy@programming.dev
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 year ago

      This was my first thought.

      I do this for a living and it’s literally built into Linux.

      Set their permissions carefully, ensure that the permission set does what you want (and not a bunch of stuff you don’t want), and keep on keeping on.