Port forwarding #

server {
  listen [::]:443 ssl;
  listen 443 ssl;

  server_name tun.site.xyz;

  location / {
    proxy_set_header Host $host;
    proxy_pass https://localhost:5443;
  }

  ssl_certificate /etc/letsencrypt/live/tun.site.xyz/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/letsencrypt/live/tun.site.xyz/privkey.pem; # managed by Certbot
}

server {
  listen [::]:80;
  listen 80;
  
  server_name tun.site.xyz;
  
  location / {
    proxy_set_header Host $host;
    proxy_pass http://localhost:5080;
  }
}

ssh -f -N -R 5443:localhost:443 tun.site.xyz

ssh-keygen -t ed25519 -b 4096 -C "name@example.com" -f ~/.ssh/my_key

Generating public/private ed25519 key pair.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:

Your identification has been saved in ~/.ssh/my_key
Your public key has been saved in ~/.ssh/my_key.pub
The key fingerprint is:
SHA256:YZNwKF/ExLQxXW5j+nnQo1v1CBcEGd65I5MDvK/pUYo name@example.com
The key's randomart image is:
+--[ED25519 256]--+
|      .BB. .++.  |
|    . .o+*.o.o . |
|     o .* o * +  |
|      .. o * + o |
|        S o O * .|
|         . = X =.|
|        E o = + .|
|           + +   |
|         .+ .    |
+----[SHA256]-----+