Back to browse
GitHub Repository

Modern SSH security for self-hosted Linux — Telegram-approved access, honeypot diversion, session recording, JIT user grants. One Python file.

3 starsPython

CodeGuard – defence-in-depth SSH security in one Python file

by georgebigh·May 26, 2026·2 points·0 comments

AI Analysis

●●SolidWizardryNiche Gem

Single Python file adds Telegram 2FA and honeypot traps to OpenSSH.

Strengths
  • ~6,000 lines, stdlib only, no runtime dependencies—genuinely single-file deployment
  • Telegram out-of-band approval for non-interactive SSH/SFTP/SCP sessions
  • Honeypot diversion logs wrong-secret IPs in sandboxed shell with asciinema recording
Weaknesses
  • Teleport handles enterprise/SOC 2 needs better—this targets homelab specifically
  • Zero forks and stars suggest limited community adoption or testing
Category
Target Audience

Homelab operators, small-team DevOps, self-hosted Linux admins

Similar To

Teleport · ssh-audit · Fail2ban

Similar Projects

Security●●Solid

AgentArmor – open-source 8-layer security framework for AI agents

Eight-layer defense-in-depth for AI agents when Guardrails AI only handles inputs.

Solve My ProblemShip It
AgastyaTodi
1063mo ago
SecurityMid

Endlessh Fisher – Turn SSH tarpit bots into collectible fish

It turns trapped SSH bots into collectible fish with species tied to trap duration, a live aquarium view, achievements, leaderboards and a read-only REST API — a delightful gamification of honeypot telemetry. Nice practical details too: privacy-friendly default hashing, optional on-click IP lookups (Shodan/AbuseIPDB), and a Docker Compose entrypoint that runs migrations and seeds automatically; just remember this is purely a visualization layer — you still need endlessh-go and InfluxDB.

Niche GemRabbit Hole
darkwolfcave
313mo ago
Security●●●Banger

GuardLLM, hardened tool calls for LLM apps

Lifecycle-aware security pipeline, not point tools—shared context from ingress through output.

Big BrainSolve My ProblemWizardry
mhcoen
104mo ago