SSH access

The host's SSH tab controls how you and your team connect to a host over SSH. From here you manage the public keys allowed to log in, the port SSH listens on, and whether password-based login is permitted.

This tab covers:

• SSH keys - manage the public keys allowed to log in
• SSH port - change the port SSH listens on
• Password authentication - allow or disable password-based login

SSH keys

The ssh_keys list defines the public SSH keys allowed to access the server. Add, edit, or delete keys as your team changes.

Each key supports an optional name or label to help you identify its owner or purpose. Both ed25519 and RSA (Rivest-Shamir-Adleman) keys are supported. For a step-by-step walkthrough of generating a keypair, see Add an SSH key.

To add a key:

1. Open the SSH tab for the host.
2. Select Add SSH key.
3. Paste the public key.
4. Optionally enter a name or label for the key.
5. Save your changes.

Inherited group keys

SSH keys can also be defined at the group level. When a host belongs to a group, it inherits the group's SSH keys in addition to any keys defined directly on the host. This lets you grant a set of keys access across many hosts at once. See Groups for how inheritance works.

SSH port

The ssh_port setting controls which port the SSH service listens on. Changing it from the default can reduce noise from automated scans.

Password authentication

The ssh_passwords toggle controls whether password-based SSH login is allowed. When disabled, users can connect only with an SSH key.

Before disabling password authentication, confirm that every user who needs access has a working SSH key configured so that no one is locked out.

Related

• TurboStack CLI - the tscli tool you run once connected over SSH
• Security
• Groups
• Applications
• Hosts overview