[PR #717] [CLOSED] Add SafeVPN - open-source remote access with data-exfiltration controls and audit logging #5844

New Issue

GiteaMirror · 2026-05-02T17:15:31-05:00

GiteaMirror commented

2026-05-02 17:15:31 -05:00

📋 Pull Request Information

Original PR: https://github.com/awesome-foss/awesome-sysadmin/pull/717
Author: @chinagloud
Created: 3/21/2026
Status: ❌ Closed

Base: master ← Head: master

📝 Commits (2)

d4ec8e2 Add SafeVPN
868454d Add SafeVPN

📊 Changes

1 file changed (+1 additions, -0 deletions)

View changed files

📝 README.md (+1 -0)

📄 Description

Add SafeVPN

Project: SafeVPN
URL: https://github.com/chinagloud/SafeVPN
License: GPL-3.0
Language: Shell

What is it?

SafeVPN solves a specific problem: how do you let external engineers (contractors, outsourced ops) remote into your servers to fix issues, while ensuring they cannot exfiltrate sensitive data?

It combines OpenVPN/WireGuard for the access layer with iptables/SSH controls that block file transfers and data exfiltration channels, plus centralized tamper-resistant audit logging that records every session and command.

Key features

Data-exfiltration controls — file transfers disabled, unnecessary ports closed via iptables + SSH config
Tamper-resistant, centralized audit logging (syslog-ng / rsyslog)
Full session recording (OpenSSH + PAM / Teleport)
Least-privilege access model, MFA support

Checklist

README with installation instructions
Licensed under GPL-3.0
Entry is in alphabetical order within the section

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/awesome-foss/awesome-sysadmin/pull/717 **Author:** [@chinagloud](https://github.com/chinagloud) **Created:** 3/21/2026 **Status:** ❌ Closed **Base:** `master` ← **Head:** `master` --- ### 📝 Commits (2) - [`d4ec8e2`](https://github.com/awesome-foss/awesome-sysadmin/commit/d4ec8e2565f8b9a15f038451051f4f63f7a13887) Add SafeVPN - [`868454d`](https://github.com/awesome-foss/awesome-sysadmin/commit/868454d17617f13b974fb3a6e2daf81b52b61327) Add SafeVPN ### 📊 Changes **1 file changed** (+1 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `README.md` (+1 -0) </details> ### 📄 Description ## Add SafeVPN **Project:** SafeVPN **URL:** https://github.com/chinagloud/SafeVPN **License:** GPL-3.0 **Language:** Shell ### What is it? SafeVPN solves a specific problem: how do you let external engineers (contractors, outsourced ops) remote into your servers to fix issues, while ensuring they cannot exfiltrate sensitive data? It combines OpenVPN/WireGuard for the access layer with iptables/SSH controls that block file transfers and data exfiltration channels, plus centralized tamper-resistant audit logging that records every session and command. ### Key features - Data-exfiltration controls — file transfers disabled, unnecessary ports closed via iptables + SSH config - Tamper-resistant, centralized audit logging (syslog-ng / rsyslog) - Full session recording (OpenSSH + PAM / Teleport) - Least-privilege access model, MFA support ### Checklist - [x] README with installation instructions - [x] Licensed under GPL-3.0 - [x] Entry is in alphabetical order within the section --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2026-05-02 17:15:31 -05:00

GiteaMirror closed this issue

2026-05-02 17:15:32 -05:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/awesome-sysadmin#5844