I'm running Debian/Trixie on and AMD64 system. I have a need to be able to connect remotely to this machine.

My network already is setup for ssh from the outside to go to my main server. From there I would normally use -L port forwarding to connect to a computer on the LAN. However, tigervnc-standalone-server's configuration defaults to only listening on localhost, assuming that anyone coming in is using an SSH tunnel already.

I could punch another hole in my router's firewall to take me directly to my workstation, and set it up as an SSH server. But I trust my LAN and would prefer to just go through my normal SSH tunnel.

tigervnc-server has a command line option to listen to the LAN but the Debian systemd service configuration doesn't invoke the server program directly, so I'm not sure how to get the option to the vnc server.

Any ideas?

This is the .service file:

[Unit]
Description=Remote desktop service (VNC)
After=network.target systemd-user-sessions.service

[Service]
Type=forking
ExecStart=/usr/libexec/tigervncsession-start %i
PIDFile=/run/tigervncsession-%i.pid
SELinuxContext=system_u:system_r:vnc_session_t:s0

[Install]
WantedBy=multi-user.target

Reply via email to