David F GliddenandClaude
0838f1cf8c
🖖 Features: - Master 'engage' script for one-command setup - 120+ CLI tools via Homebrew - 40+ Applications (casks + MAS apps) - Complete macOS system configuration - Security hardening and privacy settings - Obsidian knowledge vault setup - Comprehensive backup strategies - Automated symlink management Live long and prosper\! 🚀 🤖 Generated with Claude Code (https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
52 lines
1.2 KiB
Markdown
52 lines
1.2 KiB
Markdown
# SSH Configuration
|
|
|
|
## ⚠️ Security Notice
|
|
Never commit private keys to git! This directory contains only:
|
|
- Example SSH config (sanitized)
|
|
- Public keys (safe to share)
|
|
- Setup scripts
|
|
|
|
## Setting up SSH on a new machine
|
|
|
|
1. **Generate new SSH keys** (if needed):
|
|
```bash
|
|
# GitHub
|
|
ssh-keygen -t ed25519 -C "your_email@example.com" -f ~/.ssh/github
|
|
|
|
# General purpose
|
|
ssh-keygen -t ed25519 -C "your_email@example.com" -f ~/.ssh/id_ed25519
|
|
```
|
|
|
|
2. **Restore SSH config**:
|
|
```bash
|
|
cp ~/dotfiles/ssh/config.example ~/.ssh/config
|
|
# Edit ~/.ssh/config to add your actual hostnames, users, and key paths
|
|
```
|
|
|
|
3. **Set correct permissions**:
|
|
```bash
|
|
chmod 700 ~/.ssh
|
|
chmod 600 ~/.ssh/config
|
|
chmod 600 ~/.ssh/*_key
|
|
chmod 644 ~/.ssh/*.pub
|
|
```
|
|
|
|
4. **Restore existing keys** (if you have encrypted backups):
|
|
```bash
|
|
# Decrypt backup
|
|
gpg -d ~/dotfiles/backups/ssh_[timestamp].tar.gz.gpg | tar -xzf -
|
|
```
|
|
|
|
## SSH Config Best Practices
|
|
|
|
- Use SSH key agent: `ssh-add -K ~/.ssh/your_key`
|
|
- Use different keys for different services
|
|
- Enable 2FA where possible
|
|
- Regularly rotate keys
|
|
|
|
## Backup Strategy
|
|
|
|
Run the backup script to create encrypted backups:
|
|
```bash
|
|
~/dotfiles/backup-scripts/backup-sensitive.sh
|
|
``` |