Written 28 Aug 2026. This is a how-to, not a product card. Buy links are not tagged yet.

Give the leftover box a short name on your laptop

After SSH works, put a short name in your laptop SSH config so you type ssh leftover instead of the long address every time. You do not need a new router.

SSH from the couch taught you ssh you@that-address. That works. It is also a lot to type when you check Pi-hole or a share every day. A short name is a few lines in a file on your laptop. The leftover box does not change. This is not a new hostname on the house network. Prefer a reserved number first so the address in the file stays true: keep the leftover box on the same number.

Skip until SSH is boring

If SSH from the couch still fails, stop. Fix that first. If the address changes after every reboot, reserve it before you lock a number into this file. A key login is nicer with a short name, but not required: log in with a key, not the password every time. This note is laptop-side only.

What this file is

On your laptop, OpenSSH reads ~/.ssh/config. A Host block is a nickname. When you type that nickname, SSH fills in the real address and username for you. The leftover box never sees the nickname. It still sees a normal SSH login.

Add a Host block

On the laptop (Windows Terminal, PowerShell, Mac Terminal, or Linux), create the folder if it is missing, then open the file:

mkdir -p ~/.ssh

chmod 700 ~/.ssh

nano ~/.ssh/config

If the file already has other Host blocks, leave them. Add this at the end. Swap the username and the house number the way SSH from the couch taught you. Prefer the reserved number from keep the leftover box on the same number:

Host leftover
  HostName that-address
  User you

Save and quit (in nano: Ctrl+O, Enter, then Ctrl+X). Then lock the file down:

chmod 600 ~/.ssh/config

Optional: if your key is not the default path, add one more line under that Host block:

IdentityFile ~/.ssh/id_ed25519

That is the private key file from log in with a key, not the .pub file.

Try it

From the same laptop:

ssh leftover

You should land on the leftover-box prompt the same way as before. If it asks for a password or key passphrase, that is normal until you harden later. If it says Host key verification failed after a reinstall, that is when SSH says the leftover box looks different, not a bad config nickname.

What next

Before you turn off password login, see which laptop keys the leftover box already trusts, then put a leftover-box key on a second computer first. When both computers get in with ssh leftover, turn off leftover-box password login once the key works. Keep SSH on the house network: keep the leftover box on the house network. Do not forward port 22.

Skip

• Skip if SSH from the couch still fails.
• Skip buying a jump host, bastion, or VPN appliance for a leftover box on the house network.
• Skip a YubiKey for this nickname.
• Skip editing leftover-box sshd_config for a laptop shortcut. That harden step is later.
• Skip opening SSH to the internet.