SSH keys

SSH keys let you log in to the SFTP server of a service's volume. They belong to your account (not to a team), so they work in all your teams. Fjordrun stores only the public key; the private key stays on your computer.

Add a key

1. If you don't have a key yet, create one: ssh-keygen -t ed25519. It writes ~/.ssh/id_ed25519 (private, keep it secret) and ~/.ssh/id_ed25519.pub (public).
2. Open Account → SSH keys, give the key a name (for example work laptop) and paste the content of the .pub file, one line starting with ssh-ed25519.
3. Choose Add key.

Or with the CLI: fjordrun ssh-keys add ~/.ssh/id_ed25519.pub.

Accepted key types: Ed25519, ECDSA (ecdsa-sha2-nistp256, -nistp384, -nistp521) and RSA with 3072 bits or more. DSA keys, smaller RSA keys, hardware-key types (sk-…) and private keys are rejected. You can have up to 20 keys, and adding the same key twice is refused.

The list shows each key's fingerprint (the SHA256:… value ssh-keygen -lf id_ed25519.pub prints) and when it was last used to log in to an SFTP server.

Remove a key

Delete a key from the list (or fjordrun ssh-keys remove <name>). SFTP servers that were started with it are stopped right away, and it can't log in to new ones. Do this when a laptop is lost.

Who can manage keys

Only you, signed in to the dashboard or with a personal access token (the CLI). Team API tokens can't read or change SSH keys.

API

GET /api/v1/auth/ssh-keys, POST /api/v1/auth/ssh-keys ({"name": "…", "public_key": "ssh-ed25519 …"}) and DELETE /api/v1/auth/ssh-keys/{id}. See the SSH key object.