21:10 <hpfr> netsec question: do you set up something like port knocking or fail2ban on a VPS you want to access over SSH?

21:23 <q3k> you don't :P

21:23 <q3k> disable password login, use good ssh keys, done

21:24 <q3k> i mean, just disable password login, it's difficult to use bad ssh keys unless you're on some old debian

22:56 <hpfr> yeah, I've disabled password login and use ed25519 keys so that's good. people seem to complain about logs and that sort of thing when you open port 22 tho

23:05 <aranea> Then don't, and just move sshd to another port? That's the easiest way to tune out the script kiddie noise.