Nice tips! Personally will use SSH aliases and canonicalised hostnames.
Other topics covered in post:
- Forward Yubikey Agent
- Reuse connections
- SSH straight into tmux
- Alias commonly used hosts
- Do not add testing stuff to
~/.ssh/known_hosts - Make connections last longer
- Canonicalize hostnames
- Yubikey and GitHub, without touching it every time
A reverse proxy saves you from having to expose your services directly and acts as a go-between.
Internet <--> Reverse Proxy <--> Service