Remote Access¶
Manage your gaming handheld remotely via SSH, VPN, or remote desktop.
SSH¶
Secure shell access for command-line management.
Why SSH?¶
- Transfer files with
scporrsync - Run commands remotely
- Manage your device without physical access
- Automate tasks with scripts
Setup¶
Managing SSH Keys¶
Place public keys in your private repo:
Then reference them in your config to authorize access.
Connecting¶
Once SSH is enabled:
# Steam Deck (default user: deck)
ssh deck@192.168.1.100
# ROG Ally (your Windows username)
ssh username@192.168.1.101
Security Best Practices¶
- Use key authentication - Disable password auth
- Change default port -
ssh_port: 2222 - Use Tailscale - Instead of exposing ports
- Limit authorized keys - Only add trusted devices
Tailscale¶
Zero-config mesh VPN for secure access from anywhere.
What is Tailscale?¶
Tailscale creates an encrypted network between your devices:
- No port forwarding needed
- Works through firewalls and NAT
- Each device gets a stable IP (100.x.x.x)
- Free for personal use (up to 100 devices)
Setup¶
First-Time Setup¶
After Bootible runs:
On Windows, use the Tailscale tray app.
Using Tailscale¶
Once connected, access your device from anywhere:
Tailscale Control (Steam Deck)¶
Enable the Decky plugin to control Tailscale from Gaming Mode:
Benefits Over Port Forwarding¶
| Feature | Tailscale | Port Forwarding |
|---|---|---|
| Setup | One command | Router config |
| Security | End-to-end encrypted | Exposed port |
| NAT issues | None | Often problematic |
| IP changes | No effect | Breaks connection |
| Multiple devices | Automatic mesh | Each needs setup |
Remote Desktop¶
Graphical access to your device.
Steam Deck: Sunshine¶
Stream your Deck's desktop to another device:
Then connect with Moonlight from any device.
ROG Ally: RDP¶
Enable Windows Remote Desktop:
Connect using any RDP client:
Cross-Platform Options¶
| Tool | Platforms | Best For |
|---|---|---|
| AnyDesk | All | Easy setup, works everywhere |
| RustDesk | All | Open-source, self-hosted option |
| Parsec | All | Gaming-focused, low latency |
File Transfer¶
SCP (SSH)¶
# Copy file to Steam Deck
scp game.rom deck@100.64.1.2:~/Emulation/roms/
# Copy from Steam Deck
scp deck@100.64.1.2:~/screenshot.png ./
Rsync (SSH)¶
Better for large transfers or syncing:
Windows Shared Folders¶
On ROG Ally, share a folder:
- Right-click folder > Properties > Sharing
- Enable sharing
- Access from other Windows PCs via
\\hostname\share
Syncthing¶
Automatic file sync between devices:
Great for syncing save files, screenshots, or configs.
Wake on LAN¶
Wake your device remotely (if supported).
Requirements¶
- Device connected via Ethernet (or WiFi with WoL support)
- BIOS/UEFI setting enabled
- MAC address of device
Setup¶
- Enable WoL in BIOS/UEFI
- Note your device's MAC address
- Use a WoL app or command to wake
Using Tailscale for WoL¶
Tailscale doesn't support WoL directly, but you can:
- Keep a low-power device always on (Raspberry Pi)
- SSH to that device
- Send WoL packet from there
Security Considerations¶
Network Exposure¶
| Method | Risk Level | Mitigation |
|---|---|---|
| SSH (local only) | Low | Use keys, not passwords |
| SSH (port forwarded) | Medium | Change port, use fail2ban |
| Tailscale | Very Low | End-to-end encrypted |
| RDP (local only) | Low | Strong password |
| RDP (exposed) | High | Don't do this |
Recommendations¶
- Use Tailscale for remote access - no exposed ports
- Key-based SSH auth - no passwords to guess
- Firewall rules - limit what can connect
- Strong passwords - if you must use password auth
- Regular updates - keep Bootible and OS updated