I have an Ubuntu server that I have physical access to and is currently only accessible via the local area network.
I am considering allowing myself to connect remotely and - whilst I realise a properly configured SSH login is already quite secure - I would like to explore additional options for reinforcing security.
With that in mind - is there any method of adding two tier verification to an attempted login via SSH?
Ideally I would imagine this goes along the lines of:
- Login via [email protected]
- Initial authentication via public/private key pairs
- Additional prompt for a form of two tier verification, most likely a request for a google auth code paired with my mobile device, but if there was a neat service that could ping me a text or email I'd also be up for that.
Further context: I am the sole user of this server and will be the only individual using the SSH access.
Bonus question: Is there any setup to send a notification email/message to an account upon sucessful login?
pam_google_auth
module which can help you to achieve this behaviour. And I believe it was solved somewhere around here.