Files
dotfiles/ssh/README.md
T
David F GliddenandClaude 0838f1cf8c Initial commit: Complete macOS dotfiles system
🖖 Features:
- Master 'engage' script for one-command setup
- 120+ CLI tools via Homebrew
- 40+ Applications (casks + MAS apps)
- Complete macOS system configuration
- Security hardening and privacy settings
- Obsidian knowledge vault setup
- Comprehensive backup strategies
- Automated symlink management

Live long and prosper\! 🚀

🤖 Generated with Claude Code (https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-27 13:17:01 +02:00

1.2 KiB

SSH Configuration

⚠️ Security Notice

Never commit private keys to git! This directory contains only:

  • Example SSH config (sanitized)
  • Public keys (safe to share)
  • Setup scripts

Setting up SSH on a new machine

  1. Generate new SSH keys (if needed):
# GitHub
ssh-keygen -t ed25519 -C "your_email@example.com" -f ~/.ssh/github

# General purpose
ssh-keygen -t ed25519 -C "your_email@example.com" -f ~/.ssh/id_ed25519
  1. Restore SSH config:
cp ~/dotfiles/ssh/config.example ~/.ssh/config
# Edit ~/.ssh/config to add your actual hostnames, users, and key paths
  1. Set correct permissions:
chmod 700 ~/.ssh
chmod 600 ~/.ssh/config
chmod 600 ~/.ssh/*_key
chmod 644 ~/.ssh/*.pub
  1. Restore existing keys (if you have encrypted backups):
# Decrypt backup
gpg -d ~/dotfiles/backups/ssh_[timestamp].tar.gz.gpg | tar -xzf -

SSH Config Best Practices

  • Use SSH key agent: ssh-add -K ~/.ssh/your_key
  • Use different keys for different services
  • Enable 2FA where possible
  • Regularly rotate keys

Backup Strategy

Run the backup script to create encrypted backups:

~/dotfiles/backup-scripts/backup-sensitive.sh