A developer has created a Telegram bot designed for remote Linux server management via SSH. The tool allows users to monitor system metrics like uptime, load average, and resource usage, as well as execute commands, edit UTF-8 files, and restart systemd services directly from a mobile device.
Security measures include encrypting stored credentials in a PostgreSQL database and verifying server ownership for every request. Before establishing an SSH connection, the backend validates IP addresses to block access to internal networks and uses a Trust On First Use (TOFU) mechanism to verify host keys via SHA256 fingerprints.
To prevent unauthorized access and system abuse, the developer implemented strict command limitations, including timeouts and output size caps. The bot avoids granting full root privileges, instead using specific sudo rules for allowed operations. Additionally, payment processing includes duplicate transaction prevention by storing processed IDs in the database.
The project is available on GitHub, and a functional version of the bot is accessible via Telegram. The developer notes that while the interface is designed for quick tasks, it performs comprehensive backend checks before any operation to ensure security and maintain user permissions.
