Dev Tools · 2h ago
Telegram bot lets contractors restart nginx without SSH access
A developer built a system using a Telegram bot, a Python control plane, and a Go agent to let contractors restart nginx and other services without shell access. The system enforces approval via TOTP, nonce, and timestamp, and logs all actions in a hash chain. It solves the pain of credential drift and late-night server access.
Meridian48 take
A clever but niche solution; most teams would be better off using existing tools like HashiCorp Vault or Ansible with approval workflows.
Read the full reporting
Approval-driven server ops: how I let contractors restart nginx without ever giving them SSH →
DEV Community
server-opstelegram-bot