WSSSHD(1)

NAME
wssshd - WebSocket SSH Server daemon for secure tunneling

SYNOPSIS
wssshd [--config FILE] [--host HOST] [--port PORT] [--ssl-cert FILE] [--ssl-key FILE] [--debug] [--help]

DESCRIPTION
wssshd is a WebSocket SSH server daemon that provides secure tunneling capabilities for SSH and SCP connections. It accepts WebSocket connections from wsssh and wsscp clients, manages SSH tunnels, and provides a web-based management interface for client registration and tunnel monitoring.

OPTIONS

--config FILE
    Configuration file path (default: /etc/wssshd.conf)

--host HOST
    Server bind address (default: 0.0.0.0)

--port PORT
    Server port (default: 9898)

--ssl-cert FILE
    SSL certificate file path

--ssl-key FILE
    SSL private key file path

--debug
    Enable debug output for troubleshooting

--help
    Display help message and exit

CONFIGURATION
The server can be configured through command line options or configuration files. The configuration file supports the following sections and options:

[server]
    - host: Server bind address - port: Server port - ssl_cert: SSL certificate file - ssl_key: SSL private key file - debug: Enable debug mode

[database]
    - path: SQLite database file path

[web]
    - username: Web interface username - password: Web interface password (hashed) - secret_key: Flask secret key for sessions

EXAMPLES

Start server with default configuration:
    wssshd

Start server with custom configuration:
    wssshd --config /etc/wssshd/custom.conf

Start server with debug output:
    wssshd --debug --port 8080

Start server with SSL:
    wssshd --ssl-cert /etc/ssl/certs/wssshd.crt --ssl-key /etc/ssl/private/wssshd.key

WEB INTERFACE
The server provides a web-based management interface accessible at https://server:port/ (when SSL is enabled) or http://server:port/ (without SSL). The web interface allows: - Client registration and management - Tunnel monitoring and control - System status and logs - Configuration management

SECURITY
The server supports SSL/TLS encryption for all communications. For production deployments: - Use properly signed SSL certificates - Configure strong passwords for the web interface - Use firewall rules to restrict access to the server port - Regularly update the server and dependencies

SIGNALS

SIGTERM, SIGINT
    Graceful shutdown of the server

SIGHUP
    Reload configuration (if supported)

FILES

/etc/wssshd.conf
    Main configuration file

/var/lib/wssshd/wssshd.db
    SQLite database for client and tunnel data

/var/log/wssshd/
    Log directory

/etc/init.d/wssshd
    Init script for service management

EXIT STATUS
wssshd returns 0 on successful operation, non-zero on errors.

SEE ALSO
wsssh(1), wssshc(1), wsscp(1), ssh(1)

AUTHOR
Written by Stefy Lanza <stefy@nexlab.net>

COPYRIGHT
Copyright © 2024 Stefy Lanza and SexHack.me. License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>.

BUGS
Report bugs to: https://github.com/stefy/wsssh/issues