Roger
22f475d5be
SPEC-053/ACCESS include roger ed25519 key and ProxyJump config so admin can reach VM100 without WAN exposure. Co-authored-by: Cursor <cursoragent@cursor.com>
48 lines
1.1 KiB
Text
48 lines
1.1 KiB
Text
# 🔐 CREDENCIAIS SSH - pfSense
|
|
|
|
**Data de Atualização:** 2026-09-11
|
|
**VM:** 100 (pfSense)
|
|
**IP LAN:** 10.10.10.1
|
|
**SPEC:** `Infra-Network/SPEC-053-PFSENSE-PRIVATE-ADMIN.md` · `ACCESS-PFSENSE.md`
|
|
|
|
---
|
|
|
|
## Acesso SSH (chave — preferido)
|
|
|
|
| Item | Valor |
|
|
|------|--------|
|
|
| IP | `10.10.10.1` |
|
|
| Porta | `22` |
|
|
| User | `admin` |
|
|
| Auth | chave ed25519 (sem password) |
|
|
| Fingerprint | `SHA256:RRh+KGuEeIum2vOuofepTRxcarjx/UQA+/ODCODTK8U` |
|
|
| Path big1 | `/root/.ssh/pfsense_roger_ed25519` |
|
|
|
|
**De qualquer sítio:** Tailscale activo + `ProxyJump big1` (SSH **não** na WAN).
|
|
|
|
Privada / pública e `~/.ssh/config`: ver **`ACCESS-PFSENSE.md`**.
|
|
|
|
```bash
|
|
ssh pfsense
|
|
```
|
|
|
|
---
|
|
|
|
## Fallback password (legado)
|
|
|
|
- **User:** `admin`
|
|
- **Senha:** `pfsense` (documentada; preferir chave)
|
|
|
|
---
|
|
|
|
## WebGUI / API
|
|
|
|
| Canal | URL |
|
|
|-------|-----|
|
|
| Tailscale | https://100.116.138.100:18443/ |
|
|
| LAN | https://10.10.10.1:10443/ |
|
|
| API | https://10.10.10.1:10443/api/v2/ · Basic `api_cursor` (vault) |
|
|
|
|
---
|
|
|
|
**Status:** ✅ `ssh -o BatchMode=yes pfsense` OK no big1 (2026-09-11)
|