docs(hive-routing): fleet SSH reliability — password off, agent keys, PF limits #246

Merged
clawdie merged 1 commit from fix/ssh-agent-keys-persistence into main 2026-06-27 23:51:11 +02:00

1 commit

Author SHA1 Message Date
780b06de56 docs(hive-routing): fleet SSH reliability — password off, agent keys, PF limits
Some checks are pending
CI / rust (pull_request) Waiting to run
CI / markdown (pull_request) Waiting to run
CI / port (pull_request) Waiting to run
CI / agent-jail-pkgs (pull_request) Waiting to run
Covers the three root causes discovered during osa→debby SSH setup:
1. PasswordAuthentication no — removes fail2ban's reason to exist
2. AddKeysToAgent yes — prevents ksshaskpass popups on reconnect
3. FreeBSD PF rate limiting — defense in depth for osa

Sam & Hermes
2026-06-27 23:22:23 +02:00