Why: We need a way to secure callback support to clients in the event that their instance needs maintenance via root. This would open up a way for us to SSH into it that was otherwise unavailable before they initiated the callback.

DONE: The clients can click a button on Portal to initiate a support callback tunnel for us to hook into and SSH as root into the server.

HOW:

• https://andrewcz.com/jekyll/2017/callback-service-for-desktop-support/
• we'll need a break-glass solution in case this is not available.
  • we could always use the admin user as long as we have the password to the vault
  • but if portal is down, we can't log in to Portal, and will need some other way in.
  • This would preferably be through DigitalOcean, and trigger a support email to the client be sent out.
• We should have this on some sort of a dead man's switch so that no box can get locked out forever.