Just a quick clarification on a point made just after the 14m mark with regards to remote login to the SSH server from the Internet. Ahuka makes the comment that "you're transmitting the password in the clear."

According to the SSH man page all communications between the client and server, including password verification, are done using public key encryption.

"Finally, if other authentication methods fail, ssh prompts the user for a password. The password is sent to the remote host for checking; however, since all communications are encrypted, the password cannot be seen by someone listening on the network."

When using an open and (possibly hostile network) something to keep in mind is to watch for the warning that the server's certificate fingerprint has changed. If this comes up for a server you use regularly be very, very suspicious.

Love hearing about the security stuff. Keep it going! :)