keepass openwrt sftp 구성

Tue, 09 Dec 2025 00:00:00 +0000

 graph LR
 subgraph agq3mbw2
 A[openwrt] --- B1[keepass.kdbx]
 A[openwrt] --- B2[ssh]
 end
 B2 ---- D[duckdns]
 D <-- ssh --> C1[clients]
 C1 --- C2[keepass.keyx]

openwrt 구성

포트 개방

vi /etc/config/firewall

...
config redirect
 option dest 'lan'
 option target 'DNAT'
 option name 'agq3mbw2-ssh'
 option src 'wan'
 option dest_port '22'
 list proto 'tcp'
 option dest_ip '192.168.192.1'
 option family 'ipv4'
 option src_dport '5****'
...

/etc/init.d/firewall restart

계정 추가

echo "dev:x:1000:1000:dev:/home/dev:/bin/ash" >> /etc/passwd && \
echo "dev:x:1000:dev" >> /etc/group && \
echo "dev:19073:0:99999:7:::" >> /etc/shadow && \
passwd dev
_***************************************************************

mkdir -p /home/dev/.ssh && \
echo "ssh-ed25519 A******************************************************************* agq3mbw2-eddsa-key-20230927
" | sudo tee /home/dev/.ssh/authorized_keys && \
chmod 755 /home && \
chmod 755 /home/dev && \
chmod 700 /home/dev/.ssh && \
chmod 600 /home/dev/.ssh/authorized_keys && \
chown -R dev:dev /home/dev

echo "vscp5ekq:x:1001:1000:vscp5ekq:/home/vscp5ekq:/bin/ash" >> /etc/passwd && \
echo "agq3mbw2:x:1000:vscp5ekq" >> /etc/group && \
echo "vscp5ekq:.:0:0:99999:7:::" >> /etc/shadow && \
passwd vscp5ekq
Z***************************************************************

mkdir -p /home/vscp5ekq/.ssh && \
echo "ssh-rsa A*****************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************== generated by Keepass2Android
" | sudo tee /home/vscp5ekq/.ssh/authorized_keys && \
chmod 755 /home && \
chmod 755 /home/vscp5ekq && \
chmod 700 /home/vscp5ekq/.ssh && \
chmod 600 /home/vscp5ekq/.ssh/authorized_keys && \
chown -R vscp5ekq:dev /home/vscp5ekq

dropbear

cat << EOF | tee /etc/config/dropbear
config dropbear
 option Port '22'
 option PasswordAuth 'off'
 option RootPasswordAuth 'off'
 option GatewayPorts 'on'
EOF

/etc/init.d/dropbear restart

패키지 설치

opkg update && \
opkg install luci-app-ddns drill curl openssh-sftp-server

ddns

vi /etc/config/ddns

config ddns 'global'
 option ddns_dateformat '%F %R'
 option ddns_loglines '250'
 option ddns_rundir '/var/run/ddns'
 option ddns_logdir '/var/log/ddns'
 option use_curl '1'

config service 'duckdns'
 option service_name 'duckdns.org'
 option use_ipv6 '0'
 option enabled '1'
 option password 'b*******-****-****-****-************'
 option use_https '1'
 option ip_source 'network'
 option ip_network 'wan'
 option interface 'wan'
 option use_syslog '2'
 option check_unit 'minutes'
 option force_unit 'minutes'
 option retry_unit 'seconds'
 option param_enc 'https://www.duckdns.org/update?domains=agq3mbw2&token=b*******-****-****-****-************'
 option cacert '/etc/ssl/certs/ca-certificates.crt'
 option lookup_host 'sj9n7air.duckdns.org'
 option domain 'sj9n7air.duckdns.org'
 option username 'sj9n7air'

/etc/init.d/ddns restart

db 권한

chown dev:dev -R /usr/share/keepass && \
chmod 770 /usr/share/keepass && \
chmod 660 /usr/share/keepass/fhy8vp3u.kdbx

windows 구성

KeePass.config.xml

vi $APPDATA/KeePass/KeePass.config.xml

...
<DatabasePath>sftp://sj9n7air.duckdns.org:5****/usr/share/keepass/fhy8vp3u.kdbx</DatabasePath>
<KeyFilePath>..\..\Users\dev\AppData\Roaming\KeePass\fhy8vp3u.keyx</KeyFilePath>
...

sftp on 대충어쩌고저쩌고샬라샬라

keepass openwrt sftp 구성

openwrt 구성

포트 개방

계정 추가

dropbear

패키지 설치

ddns

db 권한

windows 구성

KeePass.config.xml